Re: ipfilter missing in most GENERIC kernels

[Greg Troxel <gdt%lexort.com@localhost>]

"Frank Wille" <frank%phoenix.owl.de@localhost> writes:

> I'm using ipfilter since decades on my servers and was surprised that
> the ipfilter pseudo-device was not included in the NetBSD-11 kernel
> for sparc64.
>
> I checked the source and realised that ipfilter is only enabled in
> generic kernels for amd64 and i386. Why?
>
> I didn't read any announcement that it is obsolete and replaced by
> NPF or similar.

I can't find it, but I remember that ipfilter was deprecated for maybe
NetBSD 9 and I think NetBSD 10.  I believe that it is not included in
any default kernsl; i386 and amd64 have it in ALL which is a kernel for
build testing, not for running.

Add it to GENERIC.local and rebuild.

You may be able to load the 'ipl' module, too.