From owner-freebsd-questions@FreeBSD.ORG Tue Sep 7 21:27:24 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E07B116A4CE for ; Tue, 7 Sep 2004 21:27:24 +0000 (GMT) Received: from mxout5.cac.washington.edu (mxout5.cac.washington.edu [140.142.32.135]) by mx1.FreeBSD.org (Postfix) with ESMTP id A810D43D5D for ; Tue, 7 Sep 2004 21:27:24 +0000 (GMT) (envelope-from dsyphers@u.washington.edu) Received: from smtp.washington.edu (smtp.washington.edu [140.142.32.139]) ESMTP id i87LROAo032336; Tue, 7 Sep 2004 14:27:24 -0700 Received: from [192.168.1.101] (c-24-18-235-11.client.comcast.net [24.18.235.11]) (authenticated bits=0)i87LRN26022619 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Tue, 7 Sep 2004 14:27:24 -0700 From: David Syphers To: freebsd-questions@freebsd.org Date: Tue, 7 Sep 2004 14:27:31 -0700 User-Agent: KMail/1.6.2 References: <20040907175149.GA29871@marvin.penguinpowered.org> <413DF8E6.9080700@elvandar.org> <20040907211223.GA1326@marvin.penguinpowered.org> In-Reply-To: <20040907211223.GA1326@marvin.penguinpowered.org> MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <200409071427.31690.dsyphers@u.washington.edu> cc: Wayne Pascoe Subject: Re: IP Filter on FreeBSD 5.2.1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Sep 2004 21:27:25 -0000 On Tuesday 07 September 2004 02:12 pm, Wayne Pascoe wrote: > On Tue, Sep 07, 2004 at 08:07:34PM +0200, Remko Lodder wrote: > > I think you missed this option: > > > > options PFIL_HOOKS # pfil(9) framework > > > > in your kernel config file.. > > > > Try it and see it's magic ;) > > Thanks a bunch - that did the trick. I've checked the doc I used to do > this, and it wasn't mentioned. I'll submit something to the maintainer > tomorrow. This option has been default in GENERIC for over 7 months, which might be why it's not mentioned. In recent -CURRENT, it's not an option because it's now always compiled into the kernel. -David -- +++ Divide By Cucumber Error. Please Reinstall Universe And Reboot. +++