Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 12 May 1996 14:00:02 -0700 (PDT)
From:      Poul-Henning Kamp <phk@critter.tfs.com>
To:        freebsd-bugs
Subject:   Re: kern/1192: Kernel IPFW 
Message-ID:  <199605122100.OAA15820@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/1192; it has been noted by GNATS.

From: Poul-Henning Kamp <phk@critter.tfs.com>
To: Garrett Wollman <wollman@lcs.mit.edu>
Cc: nash@mcs.com, FreeBSD-gnats-submit@freebsd.org
Subject: Re: kern/1192: Kernel IPFW 
Date: Sun, 12 May 1996 20:57:43 +0000

 > Actually, I would very much like to get rid of the
 > dynamically-loadable IPFW module entirely.
 
 I think that this makes sense from a security point of view, but
 people use it for a lot of things besides security.  The hooks
 are very general and can be used for a bunch of other things as
 well, so I think this is all in all, not a good idea.
 
 --
 Poul-Henning Kamp           | phk@FreeBSD.ORG       FreeBSD Core-team.
 http://www.freebsd.org/~phk | phk@login.dknet.dk    Private mailbox.
 whois: [PHK]                | phk@ref.tfs.com       TRW Financial Systems, Inc.
 Future will arrive by its own means, progress not so.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199605122100.OAA15820>