From owner-freebsd-questions@freebsd.org Sat Dec 10 05:22:54 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0E577C70887 for ; Sat, 10 Dec 2016 05:22:54 +0000 (UTC) (envelope-from steve@sohara.org) Received: from smtp3.irishbroadband.ie (smtp3.irishbroadband.ie [62.231.32.5]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CFB7124C for ; Sat, 10 Dec 2016 05:22:53 +0000 (UTC) (envelope-from steve@sohara.org) Received: from [89.127.62.20] (helo=smtp.lan.sohara.org) by smtp3.irishbroadband.ie with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.76) (envelope-from ) id 1cFa7R-0007T6-BS; Sat, 10 Dec 2016 05:22:45 +0000 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.87 (FreeBSD)) (envelope-from ) id 1cFa80-0005CP-Ew; Sat, 10 Dec 2016 05:23:20 +0000 Date: Sat, 10 Dec 2016 05:22:38 +0000 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Cc: Frank Shute Subject: Re: FreeBSD Firewalls Message-Id: <20161210052238.9bd946ad9910675a5e5f1fda@sohara.org> In-Reply-To: <20161210022347.GA44570@lime.woodcruft.co.uk> References: <5bed7716cd0c9f56e7fe73e86d0cde45.squirrel@webmail.harte-lyne.ca> <0a48b8819c28d211b5ec390007bc81a7.squirrel@webmail.harte-lyne.ca> <20161210022347.GA44570@lime.woodcruft.co.uk> X-Mailer: Sylpheed 3.5.1 (GTK+ 2.24.29; amd64-portbld-freebsd10.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Dec 2016 05:22:54 -0000 On Sat, 10 Dec 2016 02:23:47 +0000 Frank Shute wrote: > Of course, by building your own kernel it means you can no longer use > freebsd-update(8) and have to use: make buildworld/installworld procedure > as documented in the Handbook and /usr/src/UPDATING You can use freebsd-update with a custom kernel you just have to do a make kernel after updating and before rebooting, I do this regularly on my pf based firewall machine. -- Steve O'Hara-Smith