On Mon, 1 Jun 2009, Doug Barton wrote:
Bjoern A. Zeeb wrote:
On Mon, 1 Jun 2009, Doug Barton wrote:
Author: dougb Date: Mon Jun 1 05:35:03 2009 New Revision: 193198
URL: http://svn.freebsd.org/changeset/base/193198
Log: Make the pf and ipfw firewalls start before netif, just like
ipfilter already does. This eliminates a logical inconsistency,
and a small window where the system is open after the network
comes up.
Unfortunetaly this is contrary to a lot of PRs and requests on
mailing lists out there that actually want the netif/network_ipv6
to be run _before_ things come up.
Can you provide links to some of those PRs? I'd love to learn more
about this issue.
PR 130381 has one report and I had added another link to a freebsd-rc
post at one point.
--
Bjoern A. Zeeb The greatest risk is not taking one.
_______________________________________________
svn-src-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"