From owner-freebsd-net@freebsd.org Tue Jun 18 08:52:58 2019 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AA8A015B1973 for ; Tue, 18 Jun 2019 08:52:58 +0000 (UTC) (envelope-from ietf-dane@dukhovni.org) Received: from straasha.imrryr.org (straasha.imrryr.org [100.2.39.101]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 829B56A923 for ; Tue, 18 Jun 2019 08:52:57 +0000 (UTC) (envelope-from ietf-dane@dukhovni.org) Received: by straasha.imrryr.org (Postfix, from userid 1001) id D7BAE3936F3; Tue, 18 Jun 2019 04:52:56 -0400 (EDT) Date: Tue, 18 Jun 2019 04:52:56 -0400 From: Viktor Dukhovni To: freebsd-net@freebsd.org Subject: Re: Eliminating IPv6 (?) Message-ID: <20190618085256.GB84864@straasha.imrryr.org> References: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> <19574.1560847186@segfault.tristatelogic.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <19574.1560847186@segfault.tristatelogic.com> User-Agent: Mutt/1.11.4 (2019-03-13) X-Rspamd-Queue-Id: 829B56A923 X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of ietf-dane@dukhovni.org designates 100.2.39.101 as permitted sender) smtp.mailfrom=ietf-dane@dukhovni.org X-Spamd-Result: default: False [-0.77 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.32)[-0.322,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:100.2.39.101]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[dukhovni.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-0.41)[-0.405,0]; RCVD_TLS_LAST(0.00)[]; NEURAL_SPAM_SHORT(0.25)[0.247,0]; RCVD_IN_DNSWL_MED(-0.20)[101.39.2.100.list.dnswl.org : 127.0.6.2]; MX_GOOD(-0.01)[cached: smtp.dukhovni.org]; IP_SCORE(0.22)[asn: 701(1.17), country: US(-0.06)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:701, ipnet:100.2.0.0/16, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 08:52:58 -0000 On Tue, Jun 18, 2019 at 01:39:46AM -0700, Ronald F. Guilmette wrote: > > > > firewall_script="/etc/rc.firewall" > > Actually, no, that's not how one is supposed to enable one's own set > of ipfw ules. To do that, the Handbook (Sec. 30.4.1) says very clearly > that one should do: > > firewall_enable="YES" > firewall_type="path-to-my-rules-file" Well, it works for me, and is likely sound practical advice, though for the record (don't recall why) I have both: firewall_enable="YES" firewall_script="/etc/rc.homenet" firewall_type="homenet" which yields precisely the rules I specified. I hear your frustration, but venting is unlikely to be a good way to motivate people to spend unpaid time to help. Short, neutral posts with concrete questions backed by specific details of your system, what you expected and what you got, would I think be more productive. Focus on what your negative experience is with IPv6 enabled, and someone may be able to help you get past any obstacles. Indignation about having IPv6 inflicted on you is I think a suboptimal strategy. -- Viktor.