diff options
author | sam <sam@FreeBSD.org> | 2003-09-25 16:12:12 +0000 |
---|---|---|
committer | sam <sam@FreeBSD.org> | 2003-09-25 16:12:12 +0000 |
commit | a3c2b54eb89b24e55e83341d4783f0baaabf6d97 (patch) | |
tree | f34b2433c993a4a0d283c4c4f436e46d7b441ffd | |
parent | 702ec71c31d6eadeb442d6d762ee977b1d33a98f (diff) | |
download | FreeBSD-src-a3c2b54eb89b24e55e83341d4783f0baaabf6d97.zip FreeBSD-src-a3c2b54eb89b24e55e83341d4783f0baaabf6d97.tar.gz |
note PFIL_HOOKS must be explicitly configured when using IPFILTER
-rw-r--r-- | UPDATING | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -17,6 +17,13 @@ NOTE TO PEOPLE WHO THINK THAT 5.0-CURRENT IS SLOW: developers choose to disable these features on build machines to maximize performance. +20030925: + Configuring a system to use IPFILTER now requires that PFIL_HOOKS + also be explicitly configured. Previously this dependency was + magically handled through some cruft in net/pfil.h; but that has + been removed. Building a kernel with IPFILTER but not PFIL_HOOKS + will fail with obtuse errors in ip_fil.c. + 20030923: Fix a bug in arplookup(), whereby a hostile party on a locally attached network could exhaust kernel memory, and cause a system |