On Tue, 2 Sep 1997 10:20:55 +0200 (MEST) 
 Bernd Ernesti <netbsd@arresum.inka.de> wrote:

 > On Tue Sep  2 00:38:45 1997, Nathan Gelbard wrote:
 > > 
 > > I recompiled my current kernel w/ ipnat includes:
 > > 
 > > options         PFIL_HOOKS              # packet filter hooks
 > > pseudo-device   ipfilter                # IP Filter package
 > 
 > You have to use PFIL_HOOKS _OR_ ipfilter.
 > PFIL_HOOKS is for the lkm driver and the pseudo-device is for the
 > kernel driver of ipf/ipnat.

...not quite true.  PFIL_HOOKS is also used by the statically compiled
kernel driver.  It just happens that PFIL_HOOKS is implied by ipfilter,
in that case.

Jason R. Thorpe                                       thorpej@nas.nasa.gov
NASA Ames Research Center                            Home: +1 408 866 1912
NAS: M/S 258-6                                       Work: +1 415 604 0935
Moffett Field, CA 94035                             Pager: +1 415 428 6939