Date: Tue, 9 Sep 1997 20:07:15 -0700 (PDT) From: Peter Wemm <peter@FreeBSD.ORG> To: cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG Subject: cvs commit: src/sys/conf options src/sys/i386/conf LINT src/sys/netinet ip_fw.c Message-ID: <199709100307.UAA29667@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
peter 1997/09/09 20:07:15 PDT
Modified files:
sys/conf options
sys/i386/conf LINT
sys/netinet ip_fw.c
Log:
Allow a compile-time override of the ipfw deny rule. For a 'firewall'
you don't want this (and the documentation explains why), but if you
use ipfw as an as-needed casual filter as needed which normally runs as
'allow all' then having the kernel and /sbin/ipfw get out of sync is a
*MAJOR* pain in the behind.
PR: 4141
Submitted by: Heikki Suonsivu <hsu@mail.clinet.fi>
Revision Changes Path
1.33 +2 -1 src/sys/conf/options
1.364 +9 -1 src/sys/i386/conf/LINT
1.63 +16 -8 src/sys/netinet/ip_fw.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199709100307.UAA29667>