From owner-freebsd-bugs  Sun May 12 14:00:04 1996
Return-Path: owner-bugs
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id OAA15874
          for bugs-outgoing; Sun, 12 May 1996 14:00:04 -0700 (PDT)
Received: (from gnats@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id OAA15820
          Sun, 12 May 1996 14:00:02 -0700 (PDT)
Date: Sun, 12 May 1996 14:00:02 -0700 (PDT)
Message-Id: <199605122100.OAA15820@freefall.freebsd.org>
To: freebsd-bugs
Cc: 
From: Poul-Henning Kamp <phk@critter.tfs.com>
Subject: Re: kern/1192: Kernel IPFW 
Reply-To: Poul-Henning Kamp <phk@critter.tfs.com>
Sender: owner-bugs@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

The following reply was made to PR kern/1192; it has been noted by GNATS.

From: Poul-Henning Kamp <phk@critter.tfs.com>
To: Garrett Wollman <wollman@lcs.mit.edu>
Cc: nash@mcs.com, FreeBSD-gnats-submit@freebsd.org
Subject: Re: kern/1192: Kernel IPFW 
Date: Sun, 12 May 1996 20:57:43 +0000

 > Actually, I would very much like to get rid of the
 > dynamically-loadable IPFW module entirely.
 
 I think that this makes sense from a security point of view, but
 people use it for a lot of things besides security.  The hooks
 are very general and can be used for a bunch of other things as
 well, so I think this is all in all, not a good idea.
 
 --
 Poul-Henning Kamp           | phk@FreeBSD.ORG       FreeBSD Core-team.
 http://www.freebsd.org/~phk | phk@login.dknet.dk    Private mailbox.
 whois: [PHK]                | phk@ref.tfs.com       TRW Financial Systems, Inc.
 Future will arrive by its own means, progress not so.