How to tell if firewall is compiled in the kernel or just loaded

Ernie Luzar luzar722 at
Thu Nov 5 17:33:22 UTC 2020

Using the kldstat command

kldstat -v
kldstat -q -m ipl.ko
or -m ipfilter

It seems that the kernel module name has the .ko suffix and the module 
name of just the prefix. Now here comes along ipfilter. It has a kernel 
name of ipl.ko and a module name of ipfilter. Should the module name be 
ipl instead of ipfilter. Is this a mess up is the kernel compile that 
needs to be fixed in 13.0?

How can tell if ipfilter is loaded or compiled into the kernel?

More information about the freebsd-questions mailing list