From owner-freebsd-stable@FreeBSD.ORG Sat Mar 17 12:11:03 2007 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 313A916A413 for ; Sat, 17 Mar 2007 12:11:03 +0000 (UTC) (envelope-from Mark_Andrews@isc.org) Received: from mx.isc.org (mx.isc.org [204.152.184.167]) by mx1.freebsd.org (Postfix) with ESMTP id D434E13C4AE for ; Sat, 17 Mar 2007 12:11:02 +0000 (UTC) (envelope-from Mark_Andrews@isc.org) Received: from farside.isc.org (farside.isc.org [IPv6:2001:4f8:3:bb::5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "farside.isc.org", Issuer "ISC CA" (verified OK)) by mx.isc.org (Postfix) with ESMTP id 766F511401C for ; Sat, 17 Mar 2007 12:11:02 +0000 (UTC) (envelope-from Mark_Andrews@isc.org) Received: from drugs.dv.isc.org (localhost.isc.org [IPv6:::1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "drugs.dv.isc.org", Issuer "ISC CA" (verified OK)) by farside.isc.org (Postfix) with ESMTP id BE59AE60D9 for ; Sat, 17 Mar 2007 12:11:01 +0000 (UTC) (envelope-from marka@isc.org) Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.13.8/8.13.8) with ESMTP id l2HCAD63046801; Sat, 17 Mar 2007 23:10:23 +1100 (EST) (envelope-from marka@drugs.dv.isc.org) Message-Id: <200703171210.l2HCAD63046801@drugs.dv.isc.org> To: JoaoBR From: Mark Andrews In-reply-to: Your message of "Sat, 17 Mar 2007 07:57:18 -0300." <200703170757.18939.joao@matik.com.br> Date: Sat, 17 Mar 2007 23:10:13 +1100 Sender: Mark_Andrews@isc.org Cc: freebsd-stable@freebsd.org Subject: Re: rc.order wrong (ipfw) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2007 12:11:03 -0000 > On Saturday 17 March 2007 03:58, Mark Andrews wrote: > > > > > nothing goes to this machine because by default everything is blocked > > > > until > > > > > > > > you permit it > > > > > > You're absolutely correct, however your original post seems to have > > > taken many of us by surprise, causing some of us (at least me!) to > > > assume that you've changed the default method to allow. I'm obviously > > > misunderstanding, so I apologise for that, but I hope you can see the > > > reasoning behind my comments with what I knew at the time. :) > > > > ipfw needs to be before networking or router discovery > > fails for IPv6. > > > > http://www.freebsd.org/cgi/query-pr.cgi?pr=conf/108589 > > > > > as default any network connection will fail so long as you do not permit it > > If rtsol fails or is called to early it is an rtsol problem and not an ipfw > problem I guess > > as another example, what if you set a ifconfig_nic0="inet hostname" instead o > f > IP address and this hostname is not in /etc/hosts and ipfw is still not up > and named is far away to start, then, according to your idea we need to start If you do that then the address must be in /etc/hosts. > named and ipfw before netif? ip6fw is before networking. ipfw is supposed to be taking over from ip6fw. ipfw and ip6wf should be started at a similar time. rtsol is approximately the equivalent to DHCP. The machine is requesting a address from the network. It doesn't matter if it is a router or a DHCP server that is suppling the address. DHCP only works because it bypasses the firefall. Mark > -- > > Joćo > > > > > > > > A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura. > Service fornecido pelo Datacenter Matik https://datacenter.matik.com.br > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews@isc.org