From owner-freebsd-current Thu Oct 26 13:32: 1 2000 Delivered-To: freebsd-current@freebsd.org Received: from jade.chc-chimes.com (jade.chc-chimes.com [216.28.46.6]) by hub.freebsd.org (Postfix) with ESMTP id 0F9BA37B479 for ; Thu, 26 Oct 2000 13:31:58 -0700 (PDT) Received: by jade.chc-chimes.com (Postfix, from userid 1001) id 7A0971C70; Thu, 26 Oct 2000 16:31:57 -0400 (EDT) Date: Thu, 26 Oct 2000 16:31:57 -0400 From: Bill Fumerola To: Glen Gross Cc: 'FreeBSD-Current' Subject: Re: ipfw question. Message-ID: <20001026163157.C37870@jade.chc-chimes.com> References: <01C03F50.FD62AD50.ggross@symark.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <01C03F50.FD62AD50.ggross@symark.com>; from ggross@symark.com on Thu, Oct 26, 2000 at 01:31:03PM -0700 X-Operating-System: FreeBSD 3.3-STABLE i386 Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, Oct 26, 2000 at 01:31:03PM -0700, Glen Gross wrote: > > I built a 4.1.1 kernel, and the module was built, but when I load the ipfw > module with > > #kldload ipfw > > it defaults to a deny_all policy, even though I have default_to_accept in my > kernel configuration. > This makes it difficult to configure remotely without getting locked out of the > system. > Is there a way to cause the ipfw module to default to a different policy upon > loading? > For now it appears that I am locked out, until I can access the console. Your kernel configuration has ABSOLUTLY NOTHING to do with your module builds. [hawk-billf] /usr/src > cat sys/modules/ipfw/Makefile # $FreeBSD: src/sys/modules/ipfw/Makefile,v 1.13 2000/05/27 01:13:50 peter Exp $ .PATH: ${.CURDIR}/../../netinet KMOD= ipfw SRCS= ip_fw.c NOMAN= CFLAGS+= -DIPFIREWALL # #If you want it verbose #CFLAGS+= -DIPFIREWALL_VERBOSE #CFLAGS+= -DIPFIREWALL_VERBOSE_LIMIT=100 # #If you want it to pass all packets by default #CFLAGS+= -DIPFIREWALL_DEFAULT_TO_ACCEPT # Guess what you should uncomment.... -- Bill Fumerola - Network Architect, BOFH / Chimes, Inc. billf@chimesnet.com / billf@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message