From owner-freebsd-stable Tue May 28 15:31:36 2002 Delivered-To: freebsd-stable@freebsd.org Received: from apollo.backplane.com (apollo.backplane.com [216.240.41.2]) by hub.freebsd.org (Postfix) with ESMTP id 44AC937B406; Tue, 28 May 2002 15:31:31 -0700 (PDT) Received: from apollo.backplane.com (localhost [127.0.0.1]) by apollo.backplane.com (8.12.3/8.12.3) with ESMTP id g4SMVT3d025380; Tue, 28 May 2002 15:31:30 -0700 (PDT) (envelope-from dillon@apollo.backplane.com) Received: (from dillon@localhost) by apollo.backplane.com (8.12.3/8.12.3/Submit) id g4SMVT7H025379; Tue, 28 May 2002 15:31:29 -0700 (PDT) (envelope-from dillon) Date: Tue, 28 May 2002 15:31:29 -0700 (PDT) From: Matthew Dillon Message-Id: <200205282231.g4SMVT7H025379@apollo.backplane.com> To: Irwan Hadi , Jeff Jirsa , freebsd-questions@FreeBSD.ORG, freebsd-stable@FreeBSD.ORG Subject: Re: Server won't boot after recompile the kernel with ipfw support References: <20020528142640.A22370@phxby.com> <20020528133316.S16405-100000@boris.st.hmc.edu> <20020528150941.A24676@phxby.com> <200205282131.g4SLVmYZ024980@apollo.backplane.com> <200205282137.g4SLbrun025037@apollo.backplane.com> <20020528155351.B26334@phxby.com> Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG :Thanks for the tips. By the way I got one question, why the firewall :features is not bundled in the default FreeBSD installation ? :It seems the firewall features in FreeBSD looks like an "easter egg", since it :is not defined in the /usr/src/sys/i386/conf/GENERIC, but only on the :FreeBSD homepage ? : :Thanks It's a chicken-and-egg problem. It would be easy to bundle a kernel with IPFIREWALL enabled and the rules set to be permissive for someone doing a fresh install, but people upgrading their existing machines could wind up with a rude awakening when they reboot and find they can no longer access the boxes. -Matt Matthew Dillon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message