diff options
| author | Cy Schubert <cy@FreeBSD.org> | 2025-11-16 07:39:19 +0000 |
|---|---|---|
| committer | Cy Schubert <cy@FreeBSD.org> | 2025-12-08 16:15:18 +0000 |
| commit | 0ff0c19e7f70bc4d3f98196a8ad43de635cf13e5 (patch) | |
| tree | f53acf243eace380b1636101e03be822ec1c9b70 /sys/modules/ipfilter/Makefile | |
| parent | d9788eabffa4b67fc534685fc3d9b8e3334af196 (diff) | |
ipfilter: Disable ipfs(8) by default
At the moment ipfs(8) is a tool that can be easily abused. Though the
concept is sound the implementation needs some work.
ipfs(8) should be considered experimental at the moment.
This commit also makes ipfs support in the kernel optional.
Reviewed by: emaste, glebius
MFC after: 1 week
Differential revision: https://reviews.freebsd.org/D53787
Diffstat (limited to 'sys/modules/ipfilter/Makefile')
| -rw-r--r-- | sys/modules/ipfilter/Makefile | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/sys/modules/ipfilter/Makefile b/sys/modules/ipfilter/Makefile index 6c5fc140f36c..969df7dfad84 100644 --- a/sys/modules/ipfilter/Makefile +++ b/sys/modules/ipfilter/Makefile @@ -1,3 +1,5 @@ +.include <src.opts.mk> + .PATH: ${SRCTOP}/sys/netpfil/ipfilter/netinet KMOD= ipl @@ -9,6 +11,11 @@ SRCS+= opt_bpf.h opt_inet6.h opt_kern_tls.h CFLAGS+= -I${SRCTOP}/sys/netpfil/ipfilter CFLAGS+= -DIPFILTER=1 -DIPFILTER_LKM -DIPFILTER_LOG -DIPFILTER_LOOKUP + +.if ${MK_IPFILTER_IPFS} != "no" +CFLAGS+= -DIPFILTER_IPFS +.endif + # # If you don't want log functionality remove -DIPFILTER_LOG # |