From owner-freebsd-current  Wed Aug 21  9:17:44 2002
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D581737B401; Wed, 21 Aug 2002 09:17:40 -0700 (PDT)
Received: from guardian.sch.ru (dial-slt-p-005.msu.net [212.16.3.243])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 2898043E65; Wed, 21 Aug 2002 09:16:40 -0700 (PDT)
	(envelope-from mokr@mokr.net)
Received: from Draco (draco.office.tersys.ru [172.16.0.15] (may be forged))
	by guardian.sch.ru (8.12.3/8.12.3/20020429) with SMTP id g7LGE0NY078530;
	Wed, 21 Aug 2002 20:14:05 +0400 (MSD)
Message-ID: <0ab501c2492d$bc90fe10$0f0010ac@office.tersys.ru>
From: "Sergey Mokryshev" <mokr@mokr.net>
To: <cjclark@alum.mit.edu>
Cc: "Radko Keves" <rado@studnet.sk>, <questions@FreeBSD.ORG>,
	<current@FreeBSD.ORG>
References: <20020816130147.GA39907@studnet.sk> <20020816193854.GC47465@blossom.cjclark.org> <062201c2475f$9f19ab40$0f0010ac@office.tersys.ru> <20020820181519.GA69240@blossom.cjclark.org>
Subject: Re: question about ipl.ko
Date: Wed, 21 Aug 2002 20:11:36 +0400
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
FL-Build: Fidolook Express 2001 UIExt. BuildID: 3BC00FAD (7/10/2001 12:17:49).
X-Virus-Scanned: by amavisd-milter (http://amavis.org/)
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

Hello, Crist!
You wrote to "Sergey Mokryshev" <mokr@mokr.net> on Tue, 20 Aug 2002
11:15:20 -0700:

[skipped]
 >> $ grep PFIL /usr/src/sys/i386/conf/AMBER options
 >> PFIL_HOOKS

 >> You need to include "options PFIL_HOOKS" in your kernel
 >> configuration to be able to use ipfilter as a loadable module.

 CJC> But what's the point? PFIL_HOOKS only used by IPFilter. If you
 CJC> are going to be recompiling a kernel, you might just as well
 CJC> compile in "options IPFILTER" and be done with it.

PFIL hooks is a generic kernel interface and can be used
by other programs that work with network.

Another point - you can upgrade ipfilter stuff without rebooting,
it is useful in situations where minimum downtime is possible.

PFIL_HOOKS does not add much functionality to the kernel and
I always turn this on on every box.

Sergey Mokryshev.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message