Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 27 Jan 2002 01:48:48 -0800
From:      "Crist J. Clark" <cjc@FreeBSD.ORG>
To:        "M. Warner Losh" <imp@village.org>
Cc:        nate@yogotech.com, stable@FreeBSD.ORG
Subject:   Re: Firewall config non-intuitiveness
Message-ID:  <20020127014848.F23259@blossom.cjclark.org>
In-Reply-To: <20020127.004656.53474822.imp@village.org>; from imp@village.org on Sun, Jan 27, 2002 at 12:46:56AM -0700
References:  <15443.42601.781625.356369@caddis.yogotech.com> <20020127.002337.37328950.imp@village.org> <15443.44156.595426.139371@caddis.yogotech.com> <20020127.004656.53474822.imp@village.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Warner, if the proposed change were to be made, you could get the same
effect by doing,

  firewall_enable="YES"
  firewall_script="/dev/null"

Which I think more accurately describes the behavior you want (if
someone were to browse the rc.conf and try to understand your
configuration, they'd be more likely to understand what you are trying
to do if they saw the above). You want to enable firewalling, but
don't want to load any rules.
-- 
Crist J. Clark                     |     cjclark@alum.mit.edu
                                   |     cjclark@jhu.edu
http://people.freebsd.org/~cjc/    |     cjc@freebsd.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020127014848.F23259>