I want to start using npf
on my NetBSD server, rather than relying solely on the external firewall for protection. However, I get:
$ npfctl show
npfctl: /dev/npf: No such file or directory
Alright, maybe I deleted a device node. No matter:
$ grep npf /dev/MAKEDEV
makedev bpf npf
npf)
mkdev npf c 198 0
# mknod /dev/npf c 198 0
$ npfctl show
npfctl: /dev/npf: Device not configured
Oh, right, have to load the driver first:
$ modstat | grep npf; echo $?
1
$ find /stand -name 'npf.kmod'
/stand/sparc64/7.0/modules/npf/npf.kmod
$ uname -sr
NetBSD 7.0.2
# modload npf
modload: Operation not permitted
Why am I (even as root) not permitted to load modules?