git: 366ef17bb6ce - main - UPDATING: add entry for the new loader tunnable net.pf.default_to_drop

The branch main has been updated by zlei:

URL: https://cgit.FreeBSD.org/src/commit/?id=366ef17bb6ce008f79a283ff5dc5e87ab13dbdb3

commit 366ef17bb6ce008f79a283ff5dc5e87ab13dbdb3
Author:     Zhenlei Huang <zlei@FreeBSD.org>
AuthorDate: 2023-09-22 10:19:33 +0000
Commit:     Zhenlei Huang <zlei@FreeBSD.org>
CommitDate: 2023-09-22 10:19:33 +0000

    UPDATING: add entry for the new loader tunnable net.pf.default_to_drop
---
 UPDATING | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/UPDATING b/UPDATING
index e2f50b13b154..38362cb86b73 100644
--- a/UPDATING
+++ b/UPDATING
@@ -27,6 +27,11 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 15.x IS SLOW:
 	world, or to merely disable the most expensive debugging functionality
 	at runtime, run "ln -s 'abort:false,junk:false' /etc/malloc.conf".)
 
+20230922:
+	A new loader tunable net.pf.default_to_drop allows pf(4)’s default
+	behaviour to be changed from pass to drop. Previously this required
+	recompiling the kernel with the option PF_DEFAULT_TO_DROP.
+
 20230914:
 	Enable splitting out pkgbase manpages into separate packages by
 	default. To disable this, set WITHOUT_MANSPLITPKG=yes in src.conf.