From owner-cvs-sys  Tue Sep  9 20:11:48 1997
Return-Path: <owner-cvs-sys>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id UAA29846
          for cvs-sys-outgoing; Tue, 9 Sep 1997 20:11:48 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id UAA29658;
          Tue, 9 Sep 1997 20:10:00 -0700 (PDT)
From: Peter Wemm <peter@FreeBSD.ORG>
Received: (from peter@localhost)
	by freefall.freebsd.org (8.8.6/8.8.5) id UAA29667;
	Tue, 9 Sep 1997 20:07:15 -0700 (PDT)
Date: Tue, 9 Sep 1997 20:07:15 -0700 (PDT)
Message-Id: <199709100307.UAA29667@freefall.freebsd.org>
To: cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG
Subject: cvs commit: src/sys/conf options src/sys/i386/conf LINT
         src/sys/netinet ip_fw.c
Sender: owner-cvs-sys@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

peter       1997/09/09 20:07:15 PDT

  Modified files:
    sys/conf             options 
    sys/i386/conf        LINT 
    sys/netinet          ip_fw.c 
  Log:
  Allow a compile-time override of the ipfw deny rule.  For a 'firewall'
  you don't want this (and the documentation explains why), but if you
  use ipfw as an as-needed casual filter as needed which normally runs as
  'allow all' then having the kernel and /sbin/ipfw get out of sync is a
  *MAJOR* pain in the behind.
  
  PR: 4141
  Submitted by: Heikki Suonsivu <hsu@mail.clinet.fi>
  
  Revision  Changes    Path
  1.33      +2 -1      src/sys/conf/options
  1.364     +9 -1      src/sys/i386/conf/LINT
  1.63      +16 -8     src/sys/netinet/ip_fw.c