From owner-freebsd-stable Thu Jan 24 20:39:15 2002 Delivered-To: freebsd-stable@freebsd.org Received: from rockstar.stealthgeeks.net (h-66-134-120-173.LSANCA54.covad.net [66.134.120.173]) by hub.freebsd.org (Postfix) with SMTP id C51D837B400 for ; Thu, 24 Jan 2002 20:39:12 -0800 (PST) Received: (qmail 39661 invoked by uid 1001); 25 Jan 2002 04:39:12 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 25 Jan 2002 04:39:12 -0000 Date: Thu, 24 Jan 2002 20:39:12 -0800 (PST) From: Patrick Greenwell To: Tom Cc: stable@freebsd.org Subject: Re: Firewall config non-intuitiveness In-Reply-To: Message-ID: <20020124203541.G39519-100000@rockstar.stealthgeeks.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thu, 24 Jan 2002, Tom wrote: > > On Thu, 24 Jan 2002, Patrick Greenwell wrote: > > > I recently got bit by this: I have firewall options configured into my > > kernel, and made the mistake of thinking that in order to disable > ... > > Doesn't the kernel config documentation (LINT) explicitly state that the > firewall option denies all traffic by default? It sure does. But that's rather beside the point. To me if I see something in a config file that says "firewall_enable" and I set it to "no" I think it's pretty reasonable to expect that I don't want any firewalling. A default deny does not meet the criteria of "no firewall." /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ Patrick Greenwell Stealthgeeks,LLC. Operations Consulting http://www.stealthgeeks.net \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message