Firewall enabling confusion.

Shaun T. Erickson ste at
Fri Feb 27 11:40:14 PST 2004

I put 'firewall_enable="YES"' in /etc/rc.conf, in anticipation of 
rebuilding my kernel with the following options turned on:


I rebooted, for unrelated reasons, and now see in the messages file that 
ipfw2 has been enabled and, indeed, since I have no rules in place, my 
system is cut off from the network.

I haven't yet rebuilt my kernel, so I don't understand why this kicked 
in. Did adding that line in rc.conf suck in a kernel module that 
obsoletes the need for those kernel options? How do I check (I'd do an 
lsmod, on Linux - don't know what the equivalent FreeBSD command is)?
If it is a module, how do I enable logging, as adding 
'firewall_logging="YES"' to /etc/rc.conf didn't turn it on, according to 
the messages file. Likewise for divert (though I don't currently need it).

Feb 27 14:37:22 peter kernel: ipfw2 initialized, divert disabled, 
rule-based forwarding enabled, default to deny, logging disabled


More information about the freebsd-questions mailing list