From owner-freebsd-hackers@FreeBSD.ORG Fri Jan 16 06:30:01 2004 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A7FDB16A501 for ; Fri, 16 Jan 2004 06:30:00 -0800 (PST) Received: from mail.gulfgate-inc.com (mail.gulfgate-inc.com [64.1.98.180]) by mx1.FreeBSD.org (Postfix) with ESMTP id C765C43D41 for ; Fri, 16 Jan 2004 06:29:54 -0800 (PST) (envelope-from mfreitag@gulfgateequipment.com) Received: (qmail 90766 invoked by uid 85); 16 Jan 2004 14:32:45 -0000 Received: from mfreitag@gulfgateequipment.com by linkdead.beatlab.org by uid 89 with qmail-scanner-1.15 (uvscan: v4.1.60/v4248. spamassassin: 2.x. Clear:. Processed in 1.051341 secs); 16 Jan 2004 14:32:45 -0000 Received: from unknown (HELO gulfgateequipment.com) (mfreitag@gulfgateequipment.com@192.168.0.4) by 192.168.0.40 with SMTP; 16 Jan 2004 14:32:43 -0000 Message-ID: <4007F55E.8010003@gulfgateequipment.com> Date: Fri, 16 Jan 2004 08:29:50 -0600 From: Matt Freitag User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20031013 Thunderbird/0.3 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Robert Watson , freebsd-hackers@freebsd.org References: In-Reply-To: X-Mailman-Approved-At: Fri, 16 Jan 2004 06:31:59 -0800 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.1 Subject: Re: 5.1->5.2 X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Jan 2004 14:30:01 -0000 Now I can play with ULE, Thanks for your quick response. I should've checked release notes before posting my question, my fault. -mpf Robert Watson wrote: >On Thu, 15 Jan 2004, Matt Freitag wrote: > > > >>Building 5.2-RELEASE from 5.1-RELEASE-p10 w/ipf+ipfw+ipfw6+dummynet, 5.1 >>Compiled fine with this setup. I need ipfilter as it's doing my source >>routing for ipv6 (multiple transits) since ip6fw doesn't support fwd. (I >>just use ip6fw for filtering, and ipf for forwarding to the correct >>interface according to source) Am I just being stupid here somehow? >> >> > >IPFILTER now relies on the PFIL_HOOKS kernel option; this is something >that is somewhat poorly documented, and we should add it to the errate I >suspect. If you add "options PFIL_HOOKS" to your kernel config, it should >work. Moving to PFIL_HOOKS for all the "funky IP input/ouput" feature is >a goal for 5.3 (in fact, I believe Sam has it almost entirely done in one >of his development branches), and should both simplify the input/output >paths, and also simplify locking for the IP stack. So the change is for a >good cause :-). > >Robert N M Watson FreeBSD Core Team, TrustedBSD Projects >robert@fledge.watson.org Senior Research Scientist, McAfee Research > > > > > > >