Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Jul 2023 12:04:21 -0600
From:      Warner Losh <imp@bsdimp.com>
To:        freebsd-hackers@freebsd.org
Subject:   Re: dis/advantages of compiling in-kernel over kldload
Message-ID:  <CANCZdfqYSgGMT=JE8h16n0zVYbrWYYgggJwsJK4Z2QFoE8Es4g@mail.gmail.com>
In-Reply-To: <ZK7pqlDKY4JBkvek@int21h>
References:  <ZK7mnohS12eEYoV2@int21h> <CANCZdfo1z9xq2%2BZNoYmudxkrR9=c_9Eg9NOECKU8kwgoGi7pbA@mail.gmail.com> <ZK7pqlDKY4JBkvek@int21h>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
On Wed, Jul 12, 2023 at 11:58 AM void <void@f-m.fm> wrote:

> Hi Warren,
>
> On Wed, Jul 12, 2023 at 11:53:32AM -0600, Warner Losh wrote:
>
> >Yes. pf_enable=YES will load it as a side effect when it configures
> >pf, but isn't primarily to load it as a module. But if it's in the kernel,
> >you still need to configure pf on boot (or some time later).
>
> But if pf is already configured in /etc/pf.conf, is pf_enable=YES still
> required in /etc/rc.conf ?
>

Yes. /etc/rc.d/pf doesn't check /etc/pf.conf. Its pf_start() routine will
only
run if pf_enable=YES in /etc/rc.conf (or related file, which pf.conf is not)

Warner

[-- Attachment #2 --]
<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Jul 12, 2023 at 11:58 AM void &lt;<a href="mailto:void@f-m.fm">void@f-m.fm</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Warren,<br>
<br>
On Wed, Jul 12, 2023 at 11:53:32AM -0600, Warner Losh wrote:<br>
<br>
&gt;Yes. pf_enable=YES will load it as a side effect when it configures<br>
&gt;pf, but isn&#39;t primarily to load it as a module. But if it&#39;s in the kernel,<br>
&gt;you still need to configure pf on boot (or some time later).<br>
<br>
But if pf is already configured in /etc/pf.conf, is pf_enable=YES still<br>
required in /etc/rc.conf ?<br></blockquote><div><br></div><div>Yes. /etc/rc.d/pf doesn&#39;t check /etc/pf.conf. Its pf_start() routine will only</div><div>run if pf_enable=YES in /etc/rc.conf (or related file, which pf.conf is not)</div><div><br></div><div>Warner </div></div></div>

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CANCZdfqYSgGMT=JE8h16n0zVYbrWYYgggJwsJK4Z2QFoE8Es4g>