Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Jul 2023 20:05:32 +0200
From:      Dimitry Andric <dim@FreeBSD.org>
To:        void <void@f-m.fm>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: dis/advantages of compiling in-kernel over kldload
Message-ID:  <B88E284C-CCC6-4C8E-BA92-26505E6C1780@FreeBSD.org>
In-Reply-To: <ZK7pqlDKY4JBkvek@int21h>
References:  <ZK7mnohS12eEYoV2@int21h> <CANCZdfo1z9xq2%2BZNoYmudxkrR9=c_9Eg9NOECKU8kwgoGi7pbA@mail.gmail.com> <ZK7pqlDKY4JBkvek@int21h>

next in thread | previous in thread | raw e-mail | index | archive | help

--Apple-Mail=_1701F926-8F93-49C5-A555-0BEAA1E950A0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii

On 12 Jul 2023, at 19:58, void <void@f-m.fm> wrote:
> 
> On Wed, Jul 12, 2023 at 11:53:32AM -0600, Warner Losh wrote:
> 
>> Yes. pf_enable=YES will load it as a side effect when it configures
>> pf, but isn't primarily to load it as a module. But if it's in the kernel,
>> you still need to configure pf on boot (or some time later).
> 
> But if pf is already configured in /etc/pf.conf, is pf_enable=YES still
> required in /etc/rc.conf ?

Yes. The rc.conf setting is needed for /etc/rc.d/pf, which is the
command script responsible for bringing pf up (or down).

-Dimitry


--Apple-Mail=_1701F926-8F93-49C5-A555-0BEAA1E950A0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.2

iF0EARECAB0WIQR6tGLSzjX8bUI5T82wXqMKLiCWowUCZK7rbQAKCRCwXqMKLiCW
o808AKDgKgRvm23OvRfgM8cznCoMr102ZQCdFyFc8L89RJjevDej0bixp5Lfts8=
=2Qlt
-----END PGP SIGNATURE-----

--Apple-Mail=_1701F926-8F93-49C5-A555-0BEAA1E950A0--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B88E284C-CCC6-4C8E-BA92-26505E6C1780>