From owner-freebsd-hackers  Wed Jan 28 21:00:30 1998
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id VAA22473
          for hackers-outgoing; Wed, 28 Jan 1998 21:00:30 -0800 (PST)
          (envelope-from owner-freebsd-hackers@FreeBSD.ORG)
Received: from most.weird.com (root@most.weird.com [204.92.254.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id VAA22438
          for <freebsd-hackers@FreeBSD.ORG>; Wed, 28 Jan 1998 21:00:19 -0800 (PST)
          (envelope-from woods@mail.weird.com)
Received: from localhost (1608 bytes) by most.weird.com
	via sendmail with P:stdio/R:bind_hosts/T:inet_zone_bind_smtp
	(sender: <woods>) (ident <woods> using unix)
	id <m0xxlkn-000770C@most.weird.com>
	for <freebsd-hackers@FreeBSD.ORG>; Wed, 28 Jan 1998 23:39:05 -0500 (EST)
	(Smail-3.2.0.102-Pre 1997-Dec-17 #5 built 1998-Jan-8)
Message-Id: <m0xxlkn-000770C@most.weird.com>
Date: Wed, 28 Jan 1998 23:39:05 -0500 (EST)
From: woods@most.weird.com (Greg A. Woods)
To: IP-Filter Mailing List <ipfilter@postbox.anu.edu.au>,
        freebsd-hackers@FreeBSD.ORG
Subject: Re: ip-filter integration into FreeBSD RELENG_2_2
In-Reply-To: Andrew Stesin's message
	of "Wed, January 28, 1998 11:36:01 +0200"
	regarding "Re: ip-filter integration into FreeBSD RELENG_2_2"
	id <Pine.BSF.3.96.980128113359.12379F-100000@beast.gu.net>
References: <wxk9blzu7j.fsf@polysynaptic.iq.org>
	<Pine.BSF.3.96.980128113359.12379F-100000@beast.gu.net>
Reply-To: woods@weird.com (Greg A. Woods)
X-Mailer: ViewMail (vm) Version 5.96 (beta)
	with GNU Emacs 19.34.1 (m68k.68881-sun-sunos4.1.1, X toolkit) of Thu Sep 12 1996 on most
Organization: Planix, Inc.; Toronto, Ontario; Canada
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG
X-To-Unsubscribe: mail to majordomo@FreeBSD.org "unsubscribe hackers"

[ On Wed, January 28, 1998 at 11:36:01 (+0200), Andrew Stesin wrote: ]
> Subject: Re: ip-filter integration into FreeBSD RELENG_2_2
>
> 	There is a new version of IPfilter, 3.2.3; it builds
> 	_very_ smooth on FreeBSD-2.2.+ (I'm using it on
> 	numerous STABLE snapshots as of last December and January, 98).
> 
> 	I'm happy with 3.2.3 so far.

You must be using it as an LKM.  It will definitely not build into the
RELENG_2_2 branch without a couple of minor changes.

Personally I think LKMs on a secure machine are at least an order of
magnitude worse than good old MS-DOS TSRs, esp. since the public release
of the Phrack #51 newsletter.

-- 
							Greg A. Woods

+1 416 443-1734      VE3TCP      <gwoods@acm.org>      <robohack!woods>
Planix, Inc. <woods@planix.com>; Secrets of the Weird <woods@weird.com>