Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Jan 2002 02:03:03 -0500
From:      Justin White <justinfinity@mac.com>
To:        freebsd-stable@FreeBSD.ORG
Subject:   re: firewall config (CTFM)
Message-ID:  <12A141AE-13BD-11D6-876A-000393092F82@mac.com>

next in thread | raw e-mail | index | archive | help
instead of changing the way the system works, let's change the 
documentation. new people _should_ be reading the docs, and for people 
that already know, well, their existing configuration won't need to 
change a bit.

in RELENG_4 from 5 Nov, /etc/defaults/rc.conf reads:
-snip-
firewall_enable="NO"        # Set to YES to enable firewall functionality
firewall_script="/etc/rc.firewall" # Which script to run to set up the 
firewall
-snip-

change the first line to read:
firewall_enable="NO"		# set to YES to enable running of the 
following firewall script

since they _should_ have already read about default-deny in the kernel 
config, the rc.conf docs will remind them that the kernel's policy will 
stand without any rules being run.

i'm not trying to be mean, but if you don't read the docs, you deserve 
the problems you get. but we need to have good docs to get people using 
the system without getting frustrated. i'm now going to scope out the 
documentation project on freebsd.org some more:-)

-Justin White  just6979@yahoo.com  http://justinfinity.2y.net/  
AIM:just6979

PS: for fun, here's a diff for the latest file in cvs as of right now :-P
---snip---
52c52
< firewall_enable="NO"          # Set to YES to enable firewall 
functionality
---
 > firewall_enable="NO"          # Set to YES to run the following 
firewall script
---snip---


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?12A141AE-13BD-11D6-876A-000393092F82>