Patch for adding "options PF_DEFAULT_TO_DROP" to kernel configuration file

[Olivier Cochard-Labbé]

Hi,
here is a little patch (tested on FreeBSD 9.1-RC1) that add a new
option to the kernel configuration file:
options PF_DEFAULT_TO_DROP

Without this option, with an empty pf.conf: All traffic are permit.
With this option enabled, with an empty pf.conf: All traffic are
dropped by default.

If the attached file is removed, you can found the patch here:
http://www.freebsd.org/cgi/query-pr.cgi?pr=171622

Regards,

Olivier
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freebsd.pf_drop.patch
Type: application/octet-stream
Size: 1947 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20120913/6f75b9bb/freebsd.pf_drop.obj