Date: Mon, 28 Oct 2002 13:04:53 -0800 (PST) From: Sergey Mokryshev <mokr@mokr.net> To: freebsd-gnats-submit@FreeBSD.org Subject: conf/44576: IPFilter in FreeBSD-5 can't be dynamically loaded without 'options PFIL_HOOKS' in kernel Message-ID: <200210282104.g9SL4rr2091843@www.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 44576
>Category: conf
>Synopsis: IPFilter in FreeBSD-5 can't be dynamically loaded without 'options PFIL_HOOKS' in kernel
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Mon Oct 28 13:10:02 PST 2002
>Closed-Date:
>Last-Modified:
>Originator: Sergey Mokryshev
>Release: FreeBSD-5
>Organization:
Tersys
>Environment:
FreeBSD amber.mokr.net 5.0-CURRENT FreeBSD 5.0-CURRENT #17: Mon Oct 28 10:26:15 MSK 2002 mokr@amber.mokr.net:/.1/a/obj/.1/a/src/sys/AMBER_UP i386
>Description:
IPFilter on FreeBSD-5 can't be dynamically loaded without PFIL_HOOKS option in kernel. It will break upgrades from FreeBSD-4, where ipfilter modules can be loaded dynamically without any kernel options.
# PFIL_HOOKS enables an abtraction layer which is meant to be used in
# network code where filtering is required. See the pfil(9) man page.
# This option is a subset of the IPFILTER option.
This option adds a very little piece of code. Please include this option in GENERIC kernel (it is also possible to remove this option in dokern.sh to reduce kernel size)
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200210282104.g9SL4rr2091843>