Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Jan 2002 14:36:40 -0600
From:      "Jacques A. Vidrine" <n@nectar.cc>
To:        Chad David <davidc@acns.ab.ca>
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   Re: firewall config (CTFM)
Message-ID:  <20020128203640.GB42996@madman.nectar.cc>
In-Reply-To: <20020128132015.A66369@colnta.acns.ab.ca>
References:  <B95B566BD245174196CA4EE29E5818831B6469@HEXCH01.robhughes.com> <20020128113806.O95859-100000@rockstar.stealthgeeks.net> <20020128132015.A66369@colnta.acns.ab.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jan 28, 2002 at 01:20:15PM -0700, Chad David wrote:
> One of the things I would recommend documenting very clearly is that
> you DO NOT NEED TO COMPILE IPFW INTO THE KERNEL.  

Except if you want to default to deny, you must [1].  The rc system
loads the firewall after configuring your interfaces.  This may be a
bug.

Cheers,
-- 
Jacques A. Vidrine <n@nectar.cc>                 http://www.nectar.cc/
NTT/Verio SME          .     FreeBSD UNIX     .       Heimdal Kerberos
jvidrine@verio.net     .  nectar@FreeBSD.org  .          nectar@kth.se

[1] Well, I suppose you could load the ipfw module with the boot
    loader instead.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020128203640.GB42996>