Subject: Re: New IP filter code
To: Jonathan Stone <jonathan@dsg.stanford.edu>
From: Perry E. Metzger <perry@piermont.com>
List: tech-kern
Date: 04/01/1997 18:56:07
Jonathan Stone writes:
> >Did you enabled ip filter by command `/sbin/ipf -E'? Since the bug
> >that pseudo device attach routine errounously called ip filter attach
> >routine and as a result always ip filter was enabled is fixed, now we
> >have to enable ip filter explicitly.
>
> Having to explicitly turn ip_filter *on* is a bug, in some environments.
Indeed. You don't want packets to leak during bootup.
Perry