diff options
| author | Cy Schubert <cy@FreeBSD.org> | 2025-11-16 07:39:19 +0000 |
|---|---|---|
| committer | Cy Schubert <cy@FreeBSD.org> | 2025-12-08 16:15:18 +0000 |
| commit | 0ff0c19e7f70bc4d3f98196a8ad43de635cf13e5 (patch) | |
| tree | f53acf243eace380b1636101e03be822ec1c9b70 /sys/conf | |
| parent | d9788eabffa4b67fc534685fc3d9b8e3334af196 (diff) | |
ipfilter: Disable ipfs(8) by default
At the moment ipfs(8) is a tool that can be easily abused. Though the
concept is sound the implementation needs some work.
ipfs(8) should be considered experimental at the moment.
This commit also makes ipfs support in the kernel optional.
Reviewed by: emaste, glebius
MFC after: 1 week
Differential revision: https://reviews.freebsd.org/D53787
Diffstat (limited to 'sys/conf')
| -rw-r--r-- | sys/conf/NOTES | 1 | ||||
| -rw-r--r-- | sys/conf/options | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/sys/conf/NOTES b/sys/conf/NOTES index 2ba211fa45c9..8d413fb4f583 100644 --- a/sys/conf/NOTES +++ b/sys/conf/NOTES @@ -1046,6 +1046,7 @@ options IPFILTER #ipfilter support options IPFILTER_LOG #ipfilter logging options IPFILTER_LOOKUP #ipfilter pools options IPFILTER_DEFAULT_BLOCK #block all packets by default +options IPFILTER_IPFS #enable experimental ipfs(8) support options IPSTEALTH #support for stealth forwarding options PF_DEFAULT_TO_DROP #drop everything by default options TCP_BLACKBOX diff --git a/sys/conf/options b/sys/conf/options index 2437c2c6908a..c86560491faf 100644 --- a/sys/conf/options +++ b/sys/conf/options @@ -449,6 +449,7 @@ IPFILTER opt_ipfilter.h IPFILTER_DEFAULT_BLOCK opt_ipfilter.h IPFILTER_LOG opt_ipfilter.h IPFILTER_LOOKUP opt_ipfilter.h +IPFILTER_IPFS opt_ipfilter.h IPFIREWALL opt_ipfw.h IPFIREWALL_DEFAULT_TO_ACCEPT opt_ipfw.h IPFIREWALL_NAT opt_ipfw.h |