Date: Tue, 07 Sep 2004 17:50:59 -0400 From: Paul Mather <paul@gromit.dlib.vt.edu> To: Wayne Pascoe <freebsd-feb@penguinpowered.org> Cc: freebsd-questions@freebsd.org Subject: Re: IP Filter on FreeBSD 5.2.1 Message-ID: <1094593858.12931.15.camel@zappa.Chelsea-Ct.Org> In-Reply-To: <20040907212731.EEB2916A4E8@hub.freebsd.org> References: <20040907212731.EEB2916A4E8@hub.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 7 Sep 2004 22:12:23 +0100, Wayne Pascoe
<freebsd-feb@penguinpowered.org wrote:
> On Tue, Sep 07, 2004 at 08:07:34PM +0200, Remko Lodder wrote:
>
> > I think you missed this option:
> >
> > options PFIL_HOOKS # pfil(9) framework
> >
> > in your kernel config file..
> >
> > Try it and see it's magic ;)
>
> Thanks a bunch - that did the trick. I've checked the doc I used to do
> this, and it wasn't mentioned. I'll submit something to the maintainer
> tomorrow.
The maintainer is likely to direct you to this entry in 5.2.1's
/usr/src/UPDATING:
20030925:
Configuring a system to use IPFILTER now requires that PFIL_HOOKS
also be explicitly configured. Previously this dependency was
magically handled through some cruft in net/pfil.h; but that has
been removed. Building a kernel with IPFILTER but not PFIL_HOOKS
will fail with obtuse errors in ip_fil.c.
(It's a good idea to look in /usr/src/UPDATING before updating your
system.)
Cheers,
Paul.
--
e-mail: paul@gromit.dlib.vt.edu
"Without music to decorate it, time is just a bunch of boring production
deadlines or dates by which bills must be paid."
--- Frank Vincent Zappa
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1094593858.12931.15.camel>