Re: IPFilter 5.1.1

On 5/03/2012 3:17 AM, Cy Schubert wrote:
> Thanks Darren.
>
> As it's too new, it's probably too soon to import this into the FreeBSD src 
> tree. However I've started work on an IP Filter port (to be put in 
> security/ipfilter). It will put the kernel modules into /boot/modules 
> (where ports put their modules) while the userland binaries will go into 
> $PREFIX (usually /usr/local). Had to patch a couple of Makefiles to get the 
> PREFIX stuff set up (just not installing correctly yet). I spent an hour on 
> it last night and hope to put in a couple more hours tonight. I may have to 
> rename the kernel modules so as not to confuse kldload (or the user will 
> have to specify the fully qualified pathname or change the module loading 
> order via sysctl -- haven't had a chance to think about this yet).
>
> The port will has an overwrite base option like the bind ports do however 
> I'm not entirely convinced this is something we need so it may be removed 
> before it's committed.
>
> Of course if folks want to compile it into the base kernel, they're on 
> their own. The port will not support that.
>
> I suppose once people have had a chance to use the port for a while we can 
> import it into base.

That's great!

Thanks,
Darren