From owner-freebsd-current Mon Feb 26 07:56:45 1996 Return-Path: owner-current Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id HAA27167 for current-outgoing; Mon, 26 Feb 1996 07:56:45 -0800 (PST) Received: from halloran-eldar.lcs.mit.edu (halloran-eldar.lcs.mit.edu [18.26.0.159]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id HAA27159 for ; Mon, 26 Feb 1996 07:56:43 -0800 (PST) Received: by halloran-eldar.lcs.mit.edu; (5.65/1.1.8.2/19Aug95-0530PM) id AA22670; Mon, 26 Feb 1996 10:56:30 -0500 Date: Mon, 26 Feb 1996 10:56:30 -0500 From: "Garrett A. Wollman" Message-Id: <9602261556.AA22670@halloran-eldar.lcs.mit.edu> To: Poul-Henning Kamp Cc: current@FreeBSD.org Subject: Re: -stable hangs at boot (fwd) In-Reply-To: <11364.825341183@critter.tfs.com> References: <199602261228.XAA07877@asstdc.scgt.oz.au> <11364.825341183@critter.tfs.com> Sender: owner-current@FreeBSD.org Precedence: bulk < said: > If you have IPFW in your kernel, you don't want it to pass any packets > you haven't approved in your filters. Um, not necessarily. I have a situation here where there is /one/ network (out of three) that I need to isolate, and everything else should operate normally. Next time I update that machine, I'll have to go hacking through the startup files to make it do what I want to do. (It doesn't matter whether some traffic gets passed while the machine is rebooting, since it doesn't take that long to reboot. In any case, no traffic would get passed until such time as net.inet.ip.forwarding is enabled, which doesn't happen until my /etc/rc.local runs.) > If you want to dispute this design, then please find at least one textbook > or capacity in the area who agree with you first, that will save a lot of > my time. Appeal to irrelevant authority. Try again. -GAWollman -- Garrett A. Wollman | Shashish is simple, it's discreet, it's brief. ... wollman@lcs.mit.edu | Shashish is the bonding of hearts in spite of distance. Opinions not those of| It is a bond more powerful than absence. We like people MIT, LCS, ANA, or NSA| who like Shashish. - Claude McKenzie + Florent Vollant