enable IPFIREWALL_DEFAULT_TO_ACCEPT for GENERIC kernel
nightrecon at verizon.net
Mon Jun 15 08:37:37 UTC 2009
> Hello maillist,
> Whether there is a way for booting GENERIC kernel with
> 65535 allow ip from any to any
> rules without recompile kernel with options IPFIREWALL_DEFAULT_TO_ACCEPT ?
> This is single options who force me customize my own kernel with freebsd-
In your /etc/rc.conf:
firewall_enable="YES" # Set to YES to enable firewall functionality
In addition to the above to activate include this below:
IIRC that should do what you need. There is a list of the types and their
function commented in the /etc/rc.firewall script.
More information about the freebsd-questions