Re: pf and rpi

[Thor Lancelot Simon <tls%panix.com@localhost>]

On Sat, Oct 04, 2014 at 05:03:41AM +0200, Zoran Kolic wrote:
> 
> I'm afraid it does not work like that. Last win is firewall's
> internal. Having not used npf ever, I might say that "final"
> word makes it stop further checking.
> At the moment I stranded myself on securelevel. For some reason
> I just cannot change it to -1. Not in rc.conf, nor sysctl.conf.

There is no way to change the security level to -1 except by building a
kernel with options INSECURE.  Why are you trying to change the security
level to -1?  If you want to load a kernel module, you need simply to do
so before the system is running at securelevel 1 during the boot process.

The npf startup scripts should do this for you.