Bernd Ernesti wrote:
> Did you try to only load the LKM without enabling ipfilter in /etc/rc.conf?

Yes.

ROOT n106:~> ipf -V
ipf: IP Filter: v4.1.22 (396)
open device: Device not configured

ROOT n106:~> modload /usr/lkm/if_ipl.o
Module loaded as ID 0

ROOT n106:~> ipf -V
ipf: IP Filter: v4.1.22 (396)
Kernel: IP Filter: v4.1.22
Running: yes
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 0
Feature mask: 0x103

ROOT n106:~> modstat
Type    Id   Offset Loadaddr Size Info     Rev Module Name
DEV       0  -1/44  ccba0000 0084 ccbbc9a0   2 IP Filter: v4.1.22

> Is ipfilter still disabled in this configuration?

Oh, you are right. The module doesn't work for me...

Martti