Re: PF related panic

[Matthias Scheler <tron%zhadum.org.uk@localhost>]

On Thu, Nov 12, 2009 at 10:45:15AM +0200, Martti Kuparinen wrote:
> >IPF has been removed 
> 
> Ignore this, of course IPF is still included, I only removed support for 
> ippool and ipmon... Is it even possible to remove IPF and have _only_ PF?

Commenting out "pseudo-device   ipfilter" should achieve that AFAIK.
My kernel configuration with builtin PF looks like this:

[...]
options         PFIL_HOOKS      # pfil(9) packet filter hooks
#options        IPFILTER_LOG    # ipmon(8) log support
#options        IPFILTER_LOOKUP # ippool(8) support
#options        IPFILTER_DEFAULT_BLOCK  # block all packets by default
[...]
#pseudo-device  ipfilter                # IP filter (firewall) and NAT
[...]
pseudo-device   pf                      # PF packet filter
pseudo-device   pflog                   # PF log if
[...]
        Kind regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/