From owner-freebsd-stable Fri Jan 25 19: 9:41 2002 Delivered-To: freebsd-stable@freebsd.org Received: from avocet.prod.itd.earthlink.net (avocet.mail.pas.earthlink.net [207.217.120.50]) by hub.freebsd.org (Postfix) with ESMTP id 27FCB37B400; Fri, 25 Jan 2002 19:09:37 -0800 (PST) Received: from dialup-209.245.141.114.dial1.sanjose1.level3.net ([209.245.141.114] helo=blossom.cjclark.org) by avocet.prod.itd.earthlink.net with esmtp (Exim 3.33 #1) id 16UJDZ-000529-00; Fri, 25 Jan 2002 19:09:30 -0800 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.3) id g0Q384Z15342; Fri, 25 Jan 2002 19:08:04 -0800 (PST) (envelope-from cjc) Date: Fri, 25 Jan 2002 19:08:04 -0800 From: "Crist J. Clark" To: Scott Campbell Cc: Nate Williams , Nik Clayton , Patrick Greenwell , stable@FreeBSD.ORG Subject: Re: Firewall config non-intuitiveness Message-ID: <20020125190804.F14394@blossom.cjclark.org> References: <15441.36372.572274.479242@caddis.yogotech.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from scampbel@gvpl.ca on Fri, Jan 25, 2002 at 10:39:11AM -0800 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Fri, Jan 25, 2002 at 10:39:11AM -0800, Scott Campbell wrote: [snip] > Do we NEED the "firewall_enable" in rc.conf? Since we are enabling it in > the kernel then we don't really have the option to enable/disable like > other stuff (sendmail,sshd...) in rc.conf. You can disable the firewall, even if built into the kernel, with the net.inet.ip.fw.enable sysctl(8) knob. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message