diff options
| author | Cy Schubert <cy@FreeBSD.org> | 2025-11-16 07:39:19 +0000 |
|---|---|---|
| committer | Cy Schubert <cy@FreeBSD.org> | 2025-12-08 16:15:18 +0000 |
| commit | 0ff0c19e7f70bc4d3f98196a8ad43de635cf13e5 (patch) | |
| tree | f53acf243eace380b1636101e03be822ec1c9b70 /sys/conf/NOTES | |
| parent | d9788eabffa4b67fc534685fc3d9b8e3334af196 (diff) | |
ipfilter: Disable ipfs(8) by default
At the moment ipfs(8) is a tool that can be easily abused. Though the
concept is sound the implementation needs some work.
ipfs(8) should be considered experimental at the moment.
This commit also makes ipfs support in the kernel optional.
Reviewed by: emaste, glebius
MFC after: 1 week
Differential revision: https://reviews.freebsd.org/D53787
Diffstat (limited to 'sys/conf/NOTES')
| -rw-r--r-- | sys/conf/NOTES | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/conf/NOTES b/sys/conf/NOTES index 2ba211fa45c9..8d413fb4f583 100644 --- a/sys/conf/NOTES +++ b/sys/conf/NOTES @@ -1046,6 +1046,7 @@ options IPFILTER #ipfilter support options IPFILTER_LOG #ipfilter logging options IPFILTER_LOOKUP #ipfilter pools options IPFILTER_DEFAULT_BLOCK #block all packets by default +options IPFILTER_IPFS #enable experimental ipfs(8) support options IPSTEALTH #support for stealth forwarding options PF_DEFAULT_TO_DROP #drop everything by default options TCP_BLACKBOX |