Subject: HEADS UP: IPFilter upgraded to 3.4.23
To: None <current-users@netbsd.org>
From: Martti Kuparinen <martti.kuparinen@iki.fi>
List: current-users
Date: 01/24/2002 10:32:50
HEADS UP: IPFilter upgraded to 3.4.23
=====================================

I have just upgraded IPFilter to the latest version (3.4.23)
on NetBSD -current.

You must recompile kernel and the ipf tools to use the new version:

# (cd /usr/src/sys && make includes)
# (cd /usr/src/usr.sbin/ipf && make dependall install)

After reboot you will see this message:

IP Filter: v3.4.23 initialized.  Default = pass all, Logging = enabled

Please note that IPF supports IPv6! Put the IPv6 filtering rules in
/etc/ipf6.conf and they will be loaded during reboot (just like the
IPv4 rules are loaded from /etc/ipf.conf). In other words, to get
started with IPF:

# cat > /etc/ipf.conf
pass in  quick all
pass out quick all
^D
# cat > /etc/ipf6.conf
pass in  quick all
pass out quick all
^D
# echo ipfilter=YES >> /etc/rc.conf
# echo ipmon=YES >> /etc/rc.conf

I have tested this on i386 and sparc64 and things seem to work
without any errors. If you detect errors (or have improvements),
please send a problem report with the send-pr tool.

Martti

---
Martti Kuparinen <martti.kuparinen@iki.fi>      NetBSD - No media hype
http://www.iki.fi/~kuparine/                    http://www.netbsd.org/