Subject: Re: New IP filter code
To: Jonathan Stone <jonathan@dsg.stanford.edu>
From: Perry E. Metzger <perry@piermont.com>
List: tech-kern
Date: 04/01/1997 18:56:07
Jonathan Stone writes:
> >Did you enabled ip filter by command `/sbin/ipf -E'?  Since the bug
> >that pseudo device attach routine errounously called ip filter attach
> >routine and as a result always ip filter was enabled is fixed, now we
> >have to enable ip filter explicitly.
> 
> Having to explicitly turn ip_filter *on* is a bug, in some environments.

Indeed. You don't want packets to leak during bootup.

Perry