From owner-freebsd-security  Fri Oct  6  1: 7: 8 2000
Delivered-To: freebsd-security@freebsd.org
Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31])
	by hub.freebsd.org (Postfix) with ESMTP id ACF8D37B502
	for <freebsd-security@FreeBSD.ORG>; Fri,  6 Oct 2000 01:07:05 -0700 (PDT)
Received: (from des@localhost)
	by flood.ping.uio.no (8.9.3/8.9.3) id KAA09584;
	Fri, 6 Oct 2000 10:06:56 +0200 (CEST)
	(envelope-from des@ofug.org)
X-URL: http://www.ofug.org/~des/
X-Disclaimer: The views expressed in this message do not necessarily
  coincide with those of any organisation or company with
  which I am or have been affiliated.
To: Roman Shterenzon <roman@xpert.com>
Cc: Craig Cowen <craig@allmaui.com>, freebsd-security@FreeBSD.ORG
Subject: Re: Default Deny
References: <Pine.LNX.4.10.10010060238280.22615-100000@jamus.xpert.com>
From: Dag-Erling Smorgrav <des@ofug.org>
Date: 06 Oct 2000 10:06:56 +0200
In-Reply-To: Roman Shterenzon's message of "Fri, 6 Oct 2000 02:40:08 +0200 (IST)"
Message-ID: <xzpya02e6lb.fsf@flood.ping.uio.no>
Lines: 16
User-Agent: Gnus/5.0802 (Gnus v5.8.2) Emacs/20.4
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Roman Shterenzon <roman@xpert.com> writes:
> The ipfilter in freebsd seems cursed or abandoned.
> Example: this option is not documented.
> Another example: there're no hooks to start ipfilter from /etc/rc*
> eventhough there's PR: 20202

Put this in your rc.conf:

firewall_enable="YES"
firewall_script="/etc/firewall"

Where /etc/firewall is a shell script that sets up your firewall.

DES
-- 
Dag-Erling Smorgrav - des@ofug.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message