[Bug 256410] pf: Add pf_default_rules option

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 10 Jun 2021 20:36:41 +0000
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256410

--- Comment #13 from Thomas Steen Rasmussen / Tykling <thomas_at_gibfest.dk> ---
The rc.conf(5) manpage should mention this new feature as well. I am not well
versed in man-language but the following sections could be added:

     pf_default_rules_enable   (bool) Set to "NO" by default. Setting this to
"YES" enables loading pf_default_rules_file or pf_default_rules in case of a
problem when loading the ruleset in pf_rules.

     pf_default_rules_file  (str) Path to a pf ruleset to load in case of
failure when loading the ruleset in pf_rules (default /etc/pf-default.conf).

     pf_default_rules  (str) A pf ruleset to load in case of failure when
loading the ruleset in pf_rules and pf_default_rules_file is not found.
Multiple rules can be seperated with \n (default "block drop log all").

If someone can groff it up (or whatever it needs) I would appreciate it. Thank
you :)

-- 
You are receiving this mail because:
You are the assignee for the bug.
Received on Thu Jun 10 2021 - 20:36:41 UTC

Original text of this message