diff options
| author | andre <andre@FreeBSD.org> | 2004-08-19 17:38:47 +0000 |
|---|---|---|
| committer | andre <andre@FreeBSD.org> | 2004-08-19 17:38:47 +0000 |
| commit | 14296889b232e65933cc0f2512e877cc0019382b (patch) | |
| tree | 8065150f543604d3417ed36a27c7c6086dbba1b2 /sys/netinet/ip_fw_pfil.c | |
| parent | 5aee38d3218bbca30bf0849fb7e072f5b4ff5935 (diff) | |
| download | FreeBSD-src-14296889b232e65933cc0f2512e877cc0019382b.zip FreeBSD-src-14296889b232e65933cc0f2512e877cc0019382b.tar.gz | |
Bring back the sysctl 'net.inet.ip.fw.enable' to unbreak the startup scripts
and to be able to disable ipfw if it was compiled directly into the kernel.
Diffstat (limited to 'sys/netinet/ip_fw_pfil.c')
| -rw-r--r-- | sys/netinet/ip_fw_pfil.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/sys/netinet/ip_fw_pfil.c b/sys/netinet/ip_fw_pfil.c index 9056ab6..d3837e32 100644 --- a/sys/netinet/ip_fw_pfil.c +++ b/sys/netinet/ip_fw_pfil.c @@ -85,6 +85,9 @@ ipfw_check_in(void *arg, struct mbuf **m0, struct ifnet *ifp, int dir) KASSERT(dir == PFIL_IN, ("ipfw_check_in wrong direction!")); + if (!fw_enable) + goto pass; + bzero(&args, sizeof(args)); dn_tag = m_tag_find(*m0, PACKET_TAG_DUMMYNET, NULL); @@ -164,6 +167,9 @@ ipfw_check_out(void *arg, struct mbuf **m0, struct ifnet *ifp, int dir) KASSERT(dir == PFIL_OUT, ("ipfw_check_out wrong direction!")); + if (!fw_enable) + goto pass; + bzero(&args, sizeof(args)); dn_tag = m_tag_find(*m0, PACKET_TAG_DUMMYNET, NULL); |
