Change Details

7f7ef494f11d introduced a compile time option PF_DEFAULT_TO_DROP to make the pf(4) default rule to drop. While this change exposes a loader tunable `net.pf.default_to_drop` so that users can change the default rule without re-compiling the pf(4) module. MFC after: 2 weeks Relnotes: yes

7f7ef494f11d introduced a compile time option PF_DEFAULT_TO_DROP to make the pf(4) default rule to drop. While this change exposes a vnet loader tunable `net.pf.default_to_drop` so that users can change the default rule without re-compiling the pf(4) module. MFC after: 2 weeks Relnotes: yes

7f7ef494f11d introduced a compile time option PF_DEFAULT_TO_DROP to make the pf(4) default rule to drop. While this change exposes a vnet loader tunable `net.pf.default_to_drop` so that users can change the default rule without re-compiling the pf(4) module. MFC after: 2 weeks Relnotes: yes