From owner-cvs-all Mon Mar 4 6:44:26 2002 Delivered-To: cvs-all@freebsd.org Received: from gw.nectar.cc (gw.nectar.cc [208.42.49.153]) by hub.freebsd.org (Postfix) with ESMTP id 6397637B405; Mon, 4 Mar 2002 06:44:21 -0800 (PST) Received: by gw.nectar.cc (Postfix, from userid 1001) id 0BB9A24; Mon, 4 Mar 2002 08:44:21 -0600 (CST) Date: Mon, 4 Mar 2002 08:44:20 -0600 From: "Jacques A. Vidrine" To: "Crist J. Clark" Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/etc rc.firewall rc.firewall6 Message-ID: <20020304144420.GB17282@hellblazer.nectar.cc> Mail-Followup-To: "Jacques A. Vidrine" , "Crist J. Clark" , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org References: <200202281451.g1SEpgY83070@freefall.freebsd.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200202281451.g1SEpgY83070@freefall.freebsd.org> User-Agent: Mutt/1.3.27i X-Url: http://www.nectar.cc/ Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thu, Feb 28, 2002 at 06:51:42AM -0800, Crist J. Clark wrote: > cjc 2002/02/28 06:51:42 PST > > Modified files: (Branch: RELENG_4) > etc rc.firewall rc.firewall6 > Log: > MFC: Bring rc.firewall{,6} more in line with the word and spirit of > rc.conf(5) and the files' inline documentation. > > src/etc/rc.firewall 1.45 > src/etc/rc.firewall6 1.11 I missed the discussion about this change. Would you mind giving me some background, or just a pointer to the discussion? This seems to change the default (firewall_type="UNKNOWN") from disallowing 127/8 on interfaces other than lo0 (i.e. it was disallowed, but now it is allowed). I'm not sure that such a change is appropriate for -STABLE. Cheers, -- Jacques A. Vidrine http://www.nectar.cc/ NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos jvidrine@verio.net . nectar@FreeBSD.org . nectar@kth.se To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message