cvs commit: doc/en_US.ISO8859-1/books/handbook/firewalls chapter.sgml

[Tom Rhodes]

On Wed, 11 Oct 2006 01:31:14 +0300
Giorgos Keramidas <keramida at freebsd.org> wrote:

> On 2006-10-10 02:56, Tom Rhodes <trhodes at FreeBSD.org> wrote:
> > trhodes     2006-10-10 02:56:06 UTC
> > 
> >   FreeBSD doc repository
> > 
> >   Modified files:
> >     en_US.ISO8859-1/books/handbook/firewalls chapter.sgml 
> >   Log:
> >   Replace some confusing text about "IPFW being loaded/not being loaded/blah"
> >   with some more relevent and clear text about using rc.conf to load the
> >   firewall.
> >   
> >   PR              99336
> >   Discussed with: keramida (follow up to PR, etc.)
> >   
> >   Revision  Changes    Path
> >   1.73      +1 -3      doc/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
> 
> I sort of liked the reference to `rc.conf', which was removed too in
> this change though:
> 
> | % hg export 3027adf101b5
> | # HG changeset patch
> | # User trhodes
> | # Date 1160448966 0
> | # Node ID 3027adf101b54653c2ae78f67f4b198ceb6b3502
> | # Parent  ee2bbb8596284cc1e90bb0cf6c51375f1df0bbb0
> | Replace some confusing text about "IPFW being loaded/not being loaded/blah"
> | with some more relevent and clear text about using rc.conf to load the
> | firewall.
> | 
> | PR              99336
> | Discussed with: keramida (follow up to PR, etc.)
> | 
> | diff a/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml b/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
> | --- a/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
> | +++ b/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
> | @@ -2228,9 +2228,7 @@ options    IPV6FIREWALL_DEFAULT_TO_ACCEP
> |      <sect2 id="firewalls-ipfw-rc">
> |        <title><filename>/etc/rc.conf</filename> Options</title>
> | 
> | -      <para>If you do not have IPFW compiled into your kernel you will
> | -       need to load it with the following statement in your
> | -       <filename>/etc/rc.conf</filename>:</para>
> | +      <para>Enable the firewall:</para>
> | 
> |        <programlisting>firewall_enable="YES"</programlisting>
> | 
> | %
> 
> Since `/etc/rc.d/ipfw' is smart enough to load ipfw.ko or dummynet.ko
> automagically, as needed, is it ok to write this as:
> 
>         <para>Enable the firewall in your
>           <filename>/etc/rc.conf</filename> file:</para>

I was trying to follow the rest of the documentation here, but
it would not hurt to have this particular sentence re-added.

-- 
Tom Rhodes