From owner-freebsd-questions@FreeBSD.ORG Wed Sep 8 06:16:45 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ABAEF16A4CE for ; Wed, 8 Sep 2004 06:16:45 +0000 (GMT) Received: from smtp.mailbox.co.uk (smtp.mailbox.co.uk [195.82.125.32]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5D7AE43D81 for ; Wed, 8 Sep 2004 06:16:45 +0000 (GMT) (envelope-from waynep@smtp.penguinpowered.org) Received: from core.penguinpowered.org ([212.18.250.170] helo=smtp.penguinpowered.org) by smtp.mailbox.co.uk with esmtp (Exim 4.30) id 1C4vl6-0003wR-A8; Wed, 08 Sep 2004 07:16:44 +0100 Received: from waynep by smtp.penguinpowered.org with local (Exim 4.30; FreeBSD) id 1C4vgY-0000vn-Mz; Wed, 08 Sep 2004 07:12:02 +0100 Date: Wed, 8 Sep 2004 07:12:02 +0100 From: Wayne Pascoe To: Paul Mather Message-ID: <20040908061202.GA3542@marvin.penguinpowered.org> References: <20040907212731.EEB2916A4E8@hub.freebsd.org> <1094593858.12931.15.camel@zappa.Chelsea-Ct.Org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1094593858.12931.15.camel@zappa.Chelsea-Ct.Org> User-Agent: Mutt/1.4.2.1i X-System: FreeBSD i386 with kernel 5.2.1-RELEASE-p9 Sender: Wayne Pascoe cc: freebsd-questions@freebsd.org Subject: Re: IP Filter on FreeBSD 5.2.1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Sep 2004 06:16:45 -0000 On Tue, Sep 07, 2004 at 05:50:59PM -0400, Paul Mather wrote: > 20030925: > Configuring a system to use IPFILTER now requires that PFIL_HOOKS > also be explicitly configured. Previously this dependency was > magically handled through some cruft in net/pfil.h; but that has > been removed. Building a kernel with IPFILTER but not PFIL_HOOKS > will fail with obtuse errors in ip_fil.c. > > > (It's a good idea to look in /usr/src/UPDATING before updating your > system.) Fair enough - to a point. I only look for things that apply to my system when reading UPDATING... things that have changed since my last update. In september 2003, I wouldn't have read the ipfilter related stuff, because I wasn't using ipfilter at that time. When I do the update now, I just look for changes since my last update, which won't go back to 2003, so again I won't see that ipfilter entry. Then I go looking on the web for a HOWTO to install ipfilter on FreeBSD 5.2.1 - which I found, but it didn't mention this. I'm sure someone won't mind including a single line in a howto because that then turns it into a definitive reference, that doesn't require referencing twoo locations. Regards, -- Wayne Pascoe (gpg --keyserver www.co.uk.pgp.net --recv-keys 79A7C870) It could be dangerous... A lot of killing... and violence. You wanna come?