diff options
| author | Robert Watson <rwatson@FreeBSD.org> | 2002-03-08 18:47:32 +0000 |
|---|---|---|
| committer | Robert Watson <rwatson@FreeBSD.org> | 2002-03-08 18:47:32 +0000 |
| commit | 08d38d45602c91ddc8aa06be0a9ff4de362d6dbb (patch) | |
| tree | 0c039d50394c1c1521166ef2e0c207165e36550c | |
| parent | db78e578e392c305671cae6ab766f8354dae5573 (diff) | |
Notes
| -rw-r--r-- | sys/conf/NOTES | 7 | ||||
| -rw-r--r-- | sys/i386/conf/NOTES | 7 |
2 files changed, 10 insertions, 4 deletions
diff --git a/sys/conf/NOTES b/sys/conf/NOTES index 7406b3781cad..4b167b4769ee 100644 --- a/sys/conf/NOTES +++ b/sys/conf/NOTES @@ -613,6 +613,10 @@ device stf #6to4 IPv6 over IPv4 encapsulation # packets without touching the ttl). This can be useful to hide firewalls # from traceroute and similar tools. # +# PFIL_HOOKS enables an abtraction layer which is meant to be used in +# network code where filtering is required. See the pfil(9) man page. +# This option is a subset of the IPFILTER option. +# # TCPDEBUG enables code which keeps traces of the TCP state machine # for sockets with the SO_DEBUG option set, which can then be examined # using the trpt(8) utility. @@ -632,6 +636,7 @@ options IPFILTER #ipfilter support options IPFILTER_LOG #ipfilter logging options IPFILTER_DEFAULT_BLOCK #block all packets by default options IPSTEALTH #support for stealth forwarding +options PFIL_HOOKS options TCPDEBUG # RANDOM_IP_ID causes the ID field in IP packets to be randomized @@ -3052,8 +3057,6 @@ options METEOR_TEST_VIDEO options NDEVFSINO=1025 options NDEVFSOVERFLOW=32769 options NETGRAPH_BRIDGE -# PFIL_HOOKS has no effect here since it is a subset of IPFILTER. -options PFIL_HOOKS # SIMOS is broken since it is alpha-only but not ifdefed. ##options SIMOS options VESA_DEBUG diff --git a/sys/i386/conf/NOTES b/sys/i386/conf/NOTES index 7406b3781cad..4b167b4769ee 100644 --- a/sys/i386/conf/NOTES +++ b/sys/i386/conf/NOTES @@ -613,6 +613,10 @@ device stf #6to4 IPv6 over IPv4 encapsulation # packets without touching the ttl). This can be useful to hide firewalls # from traceroute and similar tools. # +# PFIL_HOOKS enables an abtraction layer which is meant to be used in +# network code where filtering is required. See the pfil(9) man page. +# This option is a subset of the IPFILTER option. +# # TCPDEBUG enables code which keeps traces of the TCP state machine # for sockets with the SO_DEBUG option set, which can then be examined # using the trpt(8) utility. @@ -632,6 +636,7 @@ options IPFILTER #ipfilter support options IPFILTER_LOG #ipfilter logging options IPFILTER_DEFAULT_BLOCK #block all packets by default options IPSTEALTH #support for stealth forwarding +options PFIL_HOOKS options TCPDEBUG # RANDOM_IP_ID causes the ID field in IP packets to be randomized @@ -3052,8 +3057,6 @@ options METEOR_TEST_VIDEO options NDEVFSINO=1025 options NDEVFSOVERFLOW=32769 options NETGRAPH_BRIDGE -# PFIL_HOOKS has no effect here since it is a subset of IPFILTER. -options PFIL_HOOKS # SIMOS is broken since it is alpha-only but not ifdefed. ##options SIMOS options VESA_DEBUG |