From owner-freebsd-stable Mon Jan 28 12:35:54 2002 Delivered-To: freebsd-stable@freebsd.org Received: from ns.yogotech.com (ns.yogotech.com [206.127.123.66]) by hub.freebsd.org (Postfix) with ESMTP id CD6D537B416 for ; Mon, 28 Jan 2002 12:35:48 -0800 (PST) Received: from caddis.yogotech.com (caddis.yogotech.com [206.127.123.130]) by ns.yogotech.com (8.9.3/8.9.3) with ESMTP id NAA05263; Mon, 28 Jan 2002 13:35:47 -0700 (MST) (envelope-from nate@yogotech.com) Received: (from nate@localhost) by caddis.yogotech.com (8.11.6/8.11.6) id g0SKZj170110; Mon, 28 Jan 2002 13:35:45 -0700 (MST) (envelope-from nate) From: Nate Williams MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15445.46625.765383.179068@caddis.yogotech.com> Date: Mon, 28 Jan 2002 13:35:45 -0700 To: Richard Glidden Cc: Nate Williams , freebsd-stable@FreeBSD.ORG Subject: RE: firewall config (CTFM) In-Reply-To: <20020128150458.E10891-100000@charon.acheron.localnet> References: <15445.37204.693732.376471@caddis.yogotech.com> <20020128150458.E10891-100000@charon.acheron.localnet> X-Mailer: VM 6.96 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid Reply-To: nate@yogotech.com (Nate Williams) Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > > Also, even *I* can't find answers to my questions with 30 minutes, and I > > know where to look, so I find you statement, well, to be brutally > > honest, both humerous and a little bit egotistical. : > > man rc.conf: > > firewall_enable > (bool) Set to ``NO'' if you do not want have firewall > rules loaded at startup, or ``YES'' if you do. If set > to ``YES'', and the kernel was not built with > IPFIREWALL, the ipfw kernel module will be loaded. See > also ipfilter_enable. > > Obviously, NO means "Don't Load Firewall Rules." This implies, to me, > that some sort of defaults might be loaded, but what those defaults > are, who knows? They might be loaded. And then again, they might not be loaded. Who knows (unless you've done this, and it's bitten you in the *ss.) I give up. Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message