Re: 1.3 ipfilter lkm

[tron%lyssa.owl.de@localhost (Matthias Scheler)]

In article <199801112306.AAA22516%agamemnon.luna.net@localhost>,
        Ruben van Staveren <ruben%luna.net@localhost> writes:
> You have it working ?

I don't know about him but I have.

> I get multiple defined symbols all the time

You probably have a kernel with full IPFILTER compiled in.

> In case you have got it working I would like to see your kernel config
> options ;)

It's easy. Put a comment before "pseudo-device   ipfilter" in your copy
of the "GENERIC" kernel configuration and recompile the kernel. Then
build and install the module. Now you can add the module to "lkm.conf":

if_ipl.o        -               if_ipl_lkmentry -               -           
BEFORENET

The easiest way to the IP filter is of course to use the GENERIC kernel.
It comes with full IP filter support which you only have to active via
"/etc/rc.conf".

-- 
Matthias Scheler                                http://home.owl.de/~tron/