kernel module for ipf

[Scott Mitchell]

On Thu, May 18, 2006 at 12:05:00PM -0400, Michael P. Soulier wrote:
> Hello,
> 
> The handbook mentions that ipf should work out of the box in FreeBSD
> thanks to a kernel module, but it doesn't say which one.
> 
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html
> 
> "IPF is included in the basic FreeBSD install as a separate run time
> loadable module. The system will dynamically load the IPF kernel
> loadable module when the rc.conf statement ipfilter_enable="YES" is
> used. The loadable module was created with logging enabled and the
> default pass all options. You do not need to compile IPF into the
> FreeBSD kernel just to change the default to block all, you can do
> that by just coding a block all rule at the end of your rule set."
> 
> I don't see anything under /boot/kernel that looks like a likely
> candidate. There's an ipfw.ko, but no ipf or ipfilter. I'd prefer to
> not reboot my system just to find out, so could someone point me to
> the correct module? I'm running FreeBSD 5.4 with the GENERIC kernel.

Hi Mike,

You want the ipl.ko module.  No, I have no idea why it's called ipl not ipf
either...

Cheers,

	Scott

-- 
===========================================================================
Scott Mitchell           | PGP Key ID | "Eagles may soar, but weasels
Cambridge, England       | 0x54B171B9 |  don't get sucked into jet engines"
scott at fishballoon.org | 0xAA775B8B |      -- Anon