From owner-freebsd-net  Wed Mar  7 10:11:43 2001
Delivered-To: freebsd-net@freebsd.org
Received: from worldclass.jolt.nu (lgh637b.hn-krukan.AC [212.217.139.112])
	by hub.freebsd.org (Postfix) with ESMTP id 5CA6A37B71A
	for <freebsd-net@FreeBSD.ORG>; Wed,  7 Mar 2001 10:11:40 -0800 (PST)
	(envelope-from c4@worldclass.jolt.nu)
Received: by worldclass.jolt.nu (Postfix, from userid 1000)
	id D734FC2; Wed,  7 Mar 2001 19:08:46 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
	by worldclass.jolt.nu (Postfix) with ESMTP
	id 6245B39; Wed,  7 Mar 2001 19:08:46 +0100 (CET)
Date: Wed, 7 Mar 2001 19:08:45 +0100 (CET)
From: Tobias Fredriksson <c4@worldclass.jolt.nu>
To: Nick Rogness <nick@rogness.net>
Cc: "Andy [TECC NOPS]" <andy@tecc.co.uk>, freebsd-net@FreeBSD.ORG
Subject: Re: ipfw
In-Reply-To: <Pine.BSF.4.21.0103071130290.20531-100000@cody.jharris.com>
Message-ID: <Pine.BSF.4.21.0103071907520.72309-100000@worldclass.jolt.nu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org



On Wed, 7 Mar 2001, Nick Rogness wrote:

> On Wed, 7 Mar 2001, Andy [TECC NOPS] wrote:
> 
> 
> > Can anyone point out the obvious mistake
> > I must be making?
> 
> 	In /etc/rc.conf:
> 
> 		firewall_enable="YES"
> 
> 	I can't remember if you need this even if the kernel is compiled
> 	with IPFIREWALL support or not.
> 
well for the rc.firewall script to be runned... yes otherwise you only
have default rule (normally deny all), but you are still able to do 'ipfw
add .....' so... not really "needed" good to have ;)

> Nick Rogness <nick@rogness.net>
> - Keep on routing in a Free World...  
>   "FreeBSD: The Power to Serve!"
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message