rc.firewall not executed?
Kris Kennaway
kris at obsecurity.org
Sat Jun 14 00:44:59 PDT 2003
I just noticed that my ipfw rules were not loaded the last time I
rebooted. My rc.conf is included below - has something changed
recently so that these settings are not enough? I didn't see anything
relevant in UPDATING. My /etc/firewall.conf exists and is readable
(and unchanged since 2002).
Kris
----
# $FreeBSD: src/etc/defaults/rc.conf,v 1.156 2002/08/30 13:01:42 hm Exp $
hostname="citusc17.usc.edu" # Set this!
nisdomainname="cituscdomain" # Set to NIS domain if using NIS (or NO).
firewall_enable="YES" # Set to YES to enable firewall functionality
firewall_type="/etc/firewall.conf" # Firewall type (see /etc/rc.firewall)
sshd_enable="YES" # Enable sshd
nfs_client_enable="YES" # This host is an NFS client (or NO).
rpc_lockd_enable="YES" # Run NFS rpc.lockd needed for client/server.
rpc_statd_enable="YES" # Run NFS rpc.statd needed for client/server.
rpcbind_enable="YES" # Run the portmapper service (YES/NO).
ntpd_enable="YES" # Run ntpd Network Time Protocol (or NO).
nis_client_enable="YES" # We're an NIS client (or NO).
defaultrouter="128.125.38.254" # Set to default gateway (or NO).
keyrate="fast" # keyboard rate to: slow, normal, fast (or NO).
moused_enable="yes" # Run the mouse daemon.
moused_type="ps/2" # See man page for rc.conf(5) for available settings.
lpd_enable="YES" # Run the line printer daemon.
dumpdev="/dev/ad0s1b" # Device name to crashdump to (or NO).
network_interfaces="lo0 xl0"
ifconfig_xl0="inet 128.125.38.177 netmask 0xffff0000"
named_enable="YES" # Run named, the DNS server (or NO).
named_program="/usr/sbin/named" # path to named, if you want a different one.
named_flags="-u bind -g bind" # Flags for named
named_chrootdir="/var/chroot/named" # Chroot directory (or "" not to auto-chroot it)
named_chroot_autoupdate="YES" # Automatically install/update chrooted
# components of named. See /etc/rc.d/named.
named_symlink_enable="YES" # Symlink /var/run/named.pid and /var/run/ndc
# to their chrooted counterparts.
sendmail_enable="YES"
sendmail_flags="-bd"
sendmail_outbound_enable="NO"
sendmail_submit_enable="NO"
sendmail_msp_queue_enable="NO"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20030614/ba27dbe3/attachment.bin
More information about the freebsd-current
mailing list