On 6/24/05, ming fu <[EMAIL PROTECTED]> wrote: > Hi, > > In the 4.x kernel, ipfilter was hardcoded before ipfw in the ip_input(). > However, in the 5.x kernel, they register themselve to the pfil hook. As > there isn't a priority number during the hook up, looks like who ever > register first get to filter the packet first. > > In case I want to preserve the 4.x behaviour of ipf before ipfw in the > input path, how do I reliable achieve that.
Link ipfilter statically inside the kernel. Load ipfw as a module. > > Regards, > Ming > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > -- If it's there, and you can see it, it's real. If it's not there, and you can see it, it's virtual. If it's there, and you can't see it, it's transparent. If it's not there, and you can't see it, you erased it. _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"
