From a6ea80bc917510b5e056cc5a29b62dfd7b39d068 Mon Sep 17 00:00:00 2001
From: Cy Schubert <cy@FreeBSD.org>
Date: Mon, 15 Dec 2025 08:21:56 -0800
Subject: [PATCH] ipfilter: Add missing kenv fetch

When a module the environment must be explicitly fetched.

Fixes:			d9788eabffa4
PR:			291548
Noted by:		markj
Reviewed by:		markj
Differential Revision:	https://reviews.freebsd.org/D54242
MFC after:		3 days
---
 sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c b/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
index 43b590cc0204..207d1895dc3e 100644
--- a/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
+++ b/sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
@@ -1439,4 +1439,6 @@ ipf_fbsd_kenv_get(ipf_main_softc_t *softc)
 {
 	TUNABLE_INT_FETCH("net.inet.ipf.large_nat",
 		&softc->ipf_large_nat);
+	TUNABLE_INT_FETCH("net.inet.ipf.jail_allowed",
+		&softc->ipf_jail_allowed);
 }