From owner-freebsd-hackers Fri Oct 26 2:18:24 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from mta03ps.bigpond.com (mta03ps.bigpond.com [144.135.25.135]) by hub.freebsd.org (Postfix) with ESMTP id AFAEF37B403; Fri, 26 Oct 2001 02:18:19 -0700 (PDT) Received: from CPE-61-9-164-106.vic.bigpond.net.au ([144.135.25.72]) by mta03ps.bigpond.com (Netscape Messaging Server 4.15) with SMTP id GLRRPI00.1Q9; Fri, 26 Oct 2001 02:12:54 +1000 Received: from 144.137.1.99 ([144.137.1.99]) by PSMAM02.mailsvc.email.bigpond.com(MailRouter V2.9k 8383/6971216); 26 Oct 2001 02:06:18 Received: (from root@localhost) by CPE-61-9-164-106.vic.bigpond.net.au (8.11.0/8.11.0) id f9PBe4d08100; Thu, 25 Oct 2001 21:40:04 +1000 From: Darren Reed Message-Id: <200110250040.KAA06332@avalon.reed.wattle.id.au> Subject: Re: ipfilter changes in rc.network (was: Re: cvs commit: src/etc rc.network) In-Reply-To: <20011025032742.A4399@hades.hell.gr> from Giorgos Keramidas at "Oct 25, 1 03:27:43 am" To: charon@labs.gr (Giorgos Keramidas) Date: Thu, 25 Oct 2001 10:40:15 +1000 Cc: Gerhard.Sittig@gmx.net, darrenr@freebsd.org, hackers@freebsd.org X-Mailer: ELM [version 2.4ME+ PL37 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG In some email I received from Giorgos Keramidas, sie wrote: > On Tue, Oct 23, 2001 at 07:45:11PM +0200, Gerhard Sittig wrote: > > > > I get the feeling this - inappropriate - setting of a _program > > variable is due to my misguided suggestion in PR conf/20202 > > which verbatimly made it into the FreeBSD start scripts. If it > > doesn't fit the usual rules feel free to correct it! :) After > > all I was a newbee to FreeBSD then (and still I'm not a guru or > > seasoned hacker:) as well as I understand Darren to do his > > daytime job with SunOS / Solaris and since he might need some > > hints on how his software fits even better into FreeBSD. I guess > > he will happily accept patches improving a wrong approach. > > > > Maybe there's need for the following parts: > > - ipfilter_program > > - ipfilter_prerules_flags > > - ipfilter_rules > > - ipfilter_postrules_flags > > ? The current situation comes from the fact that I wanted to > > have a single variable with the rules file only - to check for > > its existance (if such an additional constraints check matters). > > Done. I tested on my -current (compiled on Oct 22) the patch you can > find at http://labs.gr/~charon/patches/diff.04.ipf-rc-U > It is functionally equivalent to our current rc.network behavior, but > it uses the variables you proposed, and it moves all the flags out of > all the XXX_program variables. How many of the patches at http://labs.gr/~charon/patches/ should go into FreeBSD-current ? Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message