Sergey Mokryshev wrote:
> > I'm really not a fan of "NO_PFIL_HOOKS" as an option.
> 
> I'm not talking about NO_PFIL_HOOKS but "options PFIL_HOOKS" in GENERIC.
> Too many people may foot shoot themselves trying to upgrade from 4-STABLE
> to 5.0.

If you make them non-optional, which is what started this thread,
then you *are* talking about having to add an option in to get
rid of them.

I understand that people all want their pet software to run out
of the box without modification.


> > Probably the correct thing to do is to wire in ipfilter as a
> > Netgraph module.
> 
> AFAIK Solaris, HP-UX and others lack Netgraph support, but support pfil.

They support Streams, instead.  Same ecological niche.


-- Terry

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to