> Another point - you can upgrade ipfilter stuff without rebooting,
> it is useful in situations where minimum downtime is possible.
> PFIL_HOOKS does not add much functionality to the kernel and
> I always turn this on on every box.
I think you are missing his point though. Some people kldload ipl.ko
because they don't want to recompile their kernel. IF they recompile
it with PFIL_HOOKS might as well do ipfilter at the same time.
David W. Chapman Jr.
[EMAIL PROTECTED] Raintree Network Services, Inc. <www.inethouston.net>
[EMAIL PROTECTED] FreeBSD Committer <www.FreeBSD.org>
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message