Date: Wed, 8 Jul 2020 16:34:09 -0700 (PDT) From: "Rodney W. Grimes" <freebsd-rwg@gndrsh.dnsmgr.net> To: Ernie Luzar <luzar722@gmail.com> Cc: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>, FreeBSD current <freebsd-current@freebsd.org> Subject: Re: ipv6_ipfilter_rules= is obsolete ? Message-ID: <202007082334.068NY9QQ088738@gndrsh.dnsmgr.net> In-Reply-To: <5F064B4F.5040006@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> In /etc/defaults/rc.conf I see this > > ipv6_ipfilter_rules="/etc/ipf6.rules" > # rules definition file for ipfilter, > # see /usr/src/contrib/ipfilter/rules for examples > > man 8 ipf says > > ipf -6 ipv4 and ipv6 rules are stored in a single table and can be read > from a single file. This option is no longer required to load ipv6 rules. > > I interrupt this to mean that the ipv6_ipfilter_rules="/etc/ipf6.rules" > line in /etc/defaults/rc.conf is obsolete and should be removed > before RELEASE 13.0 is published for users to use. Interesting, though I would not remove it. It should be marked as depricated and the /etc/rc.d/ipfilter shell script updated to emit a warning that it is depricated, but it should still be processed to retain backwards compatibility and NOT lock someone out of a system who has just done an upgrade to a newer version. -- Rod Grimes rgrimes@freebsd.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202007082334.068NY9QQ088738>