cvs commit: src/sys/netinet ip_fw_pfil.c

Andre Oppermann andre at freebsd.org
Fri Aug 20 03:39:17 PDT 2004


Maxim Sobolev wrote:
> 
> Andre Oppermann wrote:
> > andre       2004-08-19 18:38:23 UTC
> >
> >   FreeBSD src repository
> >
> >   Modified files:
> >     sys/netinet          ip_fw_pfil.c
> >   Log:
> >   Give a useful error message if someone tries to compile IPFIREWALL into the
> >   kernel without specifying PFIL_HOOKS as well.
> 
> Can we just have PFIL_HOOKS enabled automagically when somebody tries to
> compile any sort of supported firewall (e.g. ipfw, pf or ipfilter) into
> kernel?

I have a patch ready to reduce the cost of unhooked pfil_hooks.  Then we
can simply remove the PFIL_HOOKS option and have it in permanently.

-- 
Andre


More information about the cvs-src mailing list