From 17dcd0265b01be32dbce079fa344bf11bdc0afe4 Mon Sep 17 00:00:00 2001 From: Sam Leffler Date: Thu, 25 Sep 2003 16:12:12 +0000 Subject: [PATCH] note PFIL_HOOKS must be explicitly configured when using IPFILTER --- UPDATING | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/UPDATING b/UPDATING index 608152f4fb2..f0d672e6fb9 100644 --- a/UPDATING +++ b/UPDATING @@ -17,6 +17,13 @@ NOTE TO PEOPLE WHO THINK THAT 5.0-CURRENT IS SLOW: developers choose to disable these features on build machines to maximize performance. +20030925: + Configuring a system to use IPFILTER now requires that PFIL_HOOKS + also be explicitly configured. Previously this dependency was + magically handled through some cruft in net/pfil.h; but that has + been removed. Building a kernel with IPFILTER but not PFIL_HOOKS + will fail with obtuse errors in ip_fil.c. + 20030923: Fix a bug in arplookup(), whereby a hostile party on a locally attached network could exhaust kernel memory, and cause a system