December 2007
Intermediate to advanced
184 pages
4h 45m
English
On NetBSD 2.0 and newer, PF is available as a loadable kernel module that can be installed via packages (security/pflkm) or compiled into a static kernel configuration. In NetBSD 3.0 onward, PF is part of the base system.
If you want to enable PF in your kernel configuration (rather than loading the kernel module), add these lines to your kernel configuration:
pseudo-device pf # PF packet filter pseudo-device pflog # PF log interface
In /etc/rc.conf you need the lines
lkm="YES" # do load kernel modules pf=YES pflogd=YES
to enable loadable kernel modules, PF, and the PF log interface, respectively.
If you installed the module, load it with
$ sudo modload /usr/lkm/pf.o
followed by
$ sudo pfctl -e
to enable PF. ...
Read now
Unlock full access