Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 Jun 2001 19:39:41 +0300
From:      Peter Pentchev <roam@orbitel.bg>
To:        Igor Roshchin <str@giganda.komkon.org>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: /etc/defaults/rc.conf (Was: IPFW newbie)
Message-ID:  <20010619193941.A944@ringworld.oblivion.bg>
In-Reply-To: <200106191622.MAA66100@giganda.komkon.org>; from str@giganda.komkon.org on Tue, Jun 19, 2001 at 12:22:26PM -0400
References:  <0106190918132R.00481@xyberpix.mip.co.za> <200106191622.MAA66100@giganda.komkon.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jun 19, 2001 at 12:22:26PM -0400, Igor Roshchin wrote:
> 
> I am surprised to see that two people in a raw gave an advice, suggesting
> to edit /etc/defaults/rc.conf.
> IIRC, /etc/defaults was introduced as a nice instrument of having
> _default_ settings in one directory, and changes to it in a standard file
> in /etc. (Approach used on other systems (e.g. Irix) even earlier)
> IMHO, this makes it much easier to do system upgrades.
> 
> So, IMHO, the Good Thing is to add lines from the files in /etc/defaults/*
> to the corresponding files in /etc/ .
> Below are the quotes from the man pages and the handbook recommending
> this style.

Absolutely.  Never touch anything in /etc/defaults.  Whatever you want
to change, change it in /etc.

For this particular case, all that's needed is:

echo 'firewall_enable="YES"' >> /etc/rc.conf
echo 'firewall_type="open"' >> /etc/rc.conf

Note the double '>' there - it tells the shell to add to that file
if it exists, and not to replace it with just those lines.

G'luck,
Peter

-- 
This sentence no verb.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010619193941.A944>