Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Sep 2005 01:43:37 -0700 (PDT)
From:      Tang Ho Yim <hoyimtang@yahoo.com>
To:        freebsd-questions@freebsd.org
Subject:   about ipfilter
Message-ID:  <20050922084337.16461.qmail@web35808.mail.mud.yahoo.com>

next in thread | raw e-mail | index | archive | help
Hi,
 
I am having confuse with the ipfilter and the kernel setup.
 
I have setup a firewall on FreeBSD 5.4 with ipfilter.
The rc.conf which include:
ipfilter_enable="YES"
ipfilter_rules="/etc/ipf.rules"
ipmon_enable="YES"
ipmon_flags="-Ds"
 
I didn't compile the kernel with:
options IPFILTER
options IPFILTER_LOG
 
Then the ipfilter cannot start on boot with the error:
link_elf: symbol in6_cksum undefined
kldload: can't load ipl: No such file or directory
/etc/rc: ERROR: IP-filter module failed to load
 
I know this error is something about missing the /dev/ipl file or else.
 
If I compile the kernel with the above options then I can start it on boot.
 
So, I am confuse. The handbook say you don't need compile it mandatory. But why I can't start without the options compile ? Am I miss something in order to load the module without compile the options ? Or actually, it must be compile within the kernel ?
 

		
---------------------------------
Yahoo! for Good
 Click here to donate to the Hurricane Katrina relief effort. 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050922084337.16461.qmail>