From owner-freebsd-stable Sun Jan 27 1:50:27 2002 Delivered-To: freebsd-stable@freebsd.org Received: from hawk.prod.itd.earthlink.net (hawk.mail.pas.earthlink.net [207.217.120.22]) by hub.freebsd.org (Postfix) with ESMTP id 8BFAB37B402 for ; Sun, 27 Jan 2002 01:50:25 -0800 (PST) Received: from dialup-209.245.129.180.dial1.sanjose1.level3.net ([209.245.129.180] helo=blossom.cjclark.org) by hawk.prod.itd.earthlink.net with esmtp (Exim 3.33 #1) id 16Ulwy-0006VY-00; Sun, 27 Jan 2002 01:50:17 -0800 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.3) id g0R9mvV25181; Sun, 27 Jan 2002 01:48:57 -0800 (PST) (envelope-from cjc) Date: Sun, 27 Jan 2002 01:48:48 -0800 From: "Crist J. Clark" To: "M. Warner Losh" Cc: nate@yogotech.com, stable@FreeBSD.ORG Subject: Re: Firewall config non-intuitiveness Message-ID: <20020127014848.F23259@blossom.cjclark.org> References: <15443.42601.781625.356369@caddis.yogotech.com> <20020127.002337.37328950.imp@village.org> <15443.44156.595426.139371@caddis.yogotech.com> <20020127.004656.53474822.imp@village.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20020127.004656.53474822.imp@village.org>; from imp@village.org on Sun, Jan 27, 2002 at 12:46:56AM -0700 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Warner, if the proposed change were to be made, you could get the same effect by doing, firewall_enable="YES" firewall_script="/dev/null" Which I think more accurately describes the behavior you want (if someone were to browse the rc.conf and try to understand your configuration, they'd be more likely to understand what you are trying to do if they saw the above). You want to enable firewalling, but don't want to load any rules. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message