ipfilter on 6.1

[J.D. Bronson]

At 06:37 PM 8/26/2006, Giorgos Keramidas wrote:
>Cool!  If this is indeed the fix, let us know :)
>
>If you also feel like it and you are not limited by contract or
>other things, I'd be interested to see how you modified IP Filter
>to make it use a "block by default" policy.
>
>Regards,
>Giorgos

This fixed it. WHEW!

Simply adding this to my own kernel:

options         IPFILTER
options         IPFILTER_LOG
options         IPFILTER_DEFAULT_BLOCK

....

then:

# ipf -V

ipf: IP Filter: v4.1.8 (416)
Kernel: IP Filter: v4.1.8
Running: yes
Log Flags: 0 = none set
Default: block all, Logging: available
Active list: 0
Feature mask: 0xa