On Mon, 1 Jun 2009, Doug Barton wrote:

Bjoern A. Zeeb wrote:
On Mon, 1 Jun 2009, Doug Barton wrote:

Author: dougb Date: Mon Jun  1 05:35:03 2009 New Revision: 193198
 URL: http://svn.freebsd.org/changeset/base/193198

Log: Make the pf and ipfw firewalls start before netif, just like
 ipfilter already does. This eliminates a logical inconsistency,
and a small window where the system is open after the network
comes up.

Unfortunetaly this is contrary to a lot of PRs and requests on
mailing lists out there that actually want the netif/network_ipv6
to be run _before_ things come up.

Can you provide links to some of those PRs? I'd love to learn more
about this issue.

PR 130381 has one report and I had added another link to a freebsd-rc
post at one point.


--
Bjoern A. Zeeb                      The greatest risk is not taking one.
_______________________________________________
svn-src-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"

Reply via email to