> Another point - you can upgrade ipfilter stuff without rebooting, > it is useful in situations where minimum downtime is possible. > > PFIL_HOOKS does not add much functionality to the kernel and > I always turn this on on every box.
I think you are missing his point though. Some people kldload ipl.ko because they don't want to recompile their kernel. IF they recompile it with PFIL_HOOKS might as well do ipfilter at the same time. -- David W. Chapman Jr. [EMAIL PROTECTED] Raintree Network Services, Inc. <www.inethouston.net> [EMAIL PROTECTED] FreeBSD Committer <www.FreeBSD.org> To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message