From owner-freebsd-stable  Sat Jan 26 22:44:34 2002
Delivered-To: freebsd-stable@freebsd.org
Received: from ns.yogotech.com (ns.yogotech.com [206.127.123.66])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3B78037B400; Sat, 26 Jan 2002 22:44:30 -0800 (PST)
Received: from caddis.yogotech.com (caddis.yogotech.com [206.127.123.130])
	by ns.yogotech.com (8.9.3/8.9.3) with ESMTP id XAA06145;
	Sat, 26 Jan 2002 23:44:19 -0700 (MST)
	(envelope-from nate@yogotech.com)
Received: (from nate@localhost)
	by caddis.yogotech.com (8.11.6/8.11.6) id g0R6hqu53621;
	Sat, 26 Jan 2002 23:43:52 -0700 (MST)
	(envelope-from nate)
From: Nate Williams <nate@yogotech.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15443.41384.226640.462561@caddis.yogotech.com>
Date: Sat, 26 Jan 2002 23:43:52 -0700
To: "Crist J. Clark" <cjc@FreeBSD.ORG>
Cc: "Thomas T. Veldhouse" <veldy@veldy.net>,
	Patrick Greenwell <patrick@stealthgeeks.net>, stable@FreeBSD.ORG
Subject: Re: Firewall config non-intuitiveness
In-Reply-To: <20020125190552.E14394@blossom.cjclark.org>
References: <20020124201411.A39351-100000@rockstar.stealthgeeks.net>
	<20020124220302.N87663@blossom.cjclark.org>
	<002b01c1a5a7$67200e00$3028680a@tgt.com>
	<20020125160846.A14394@blossom.cjclark.org>
	<000c01c1a5ff$a4539870$0101a8c0@cascade>
	<20020125190552.E14394@blossom.cjclark.org>
X-Mailer: VM 6.96 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid
Reply-To: nate@yogotech.com (Nate Williams)
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

> But there may be people running systems out there with
> 'firewall_enable="NO"' and compiled-in firewalls.

This is a straw-man.  This requires kernel changes, and anyone willing
to do kernel changes just to install different firewall rules deserves
to get the rug yanked out from under them.

> Because I can't think of a workable configuration that would be set up
> this way, it doesn't mean there are not any.

There aren't any systems in useful use that would be effected by this
change.

If you don't get around to it, I might. :) :) :)




Nate

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message