Change IPFW default to allow

Michael Sierchio kudzu at
Sun Dec 9 22:52:41 UTC 2018

On Sun, Dec 9, 2018 at 10:58 AM Ernie Luzar <luzar722 at> wrote:

> Michael Sierchio wrote:
> > sysctl net.inet.ip.fw.default_to_accept=1
> >
> > On Sun, Dec 9, 2018 at 10:08 AM Ernie Luzar <luzar722 at> wrote:
> >
> >> Is there a sysctl nib to reset the ipfw default from deny all to allow
> >> all? Some thing that works without rebooting the system.
>   sysctl net.inet.ip.fw.default_to_accept=1 doesn't work.
> unknown oid
> I believe that has to go in loader.conf and reboot the system to enable.

Yes, it is a read-only tunable.

*65>* sudo sysctl net.inet.ip.fw.default_to_accept=0

sysctl: oid 'net.inet.ip.fw.default_to_accept' is a read only tunable
sysctl: Tunable values are set in /boot/loader.conf

"Well," Brahma said, "even after ten thousand explanations, a fool is no
wiser, but an intelligent person requires only two thousand five hundred."

- The Mahābhārata

More information about the freebsd-questions mailing list