Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Jun 2019 07:54:54 -0400
From:      Robert Huff <roberthuff@rcn.com>
To:        "Ronald F. Guilmette" <rfg@tristatelogic.com>
Cc:        freebsd-net@freebsd.org, freebsd-questions@freebsd.org
Subject:   Re: Eliminating IPv6 (?)
Message-ID:  <23816.53518.998090.665606@jerusalem.litteratus.org>
In-Reply-To: <19574.1560847186@segfault.tristatelogic.com>
References:  <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> <19574.1560847186@segfault.tristatelogic.com>

next in thread | previous in thread | raw e-mail | index | archive | help

Ronald F. Guilmette writes:

>  >Instead of messing with the system provided file you could
>  >create a new one with only your own desired rules and then set
>  >this rc.conf variable:
>  >
>  >	firewall_script="/etc/rc.firewall"
>  
>  Actually, no, that's not how one is supposed to enable one's own set
>  of ipfw ules.  To do that, the Handbook (Sec. 30.4.1) says very clearly
>  that one should do:
>  
>      firewall_enable="YES"
>      firewall_type="path-to-my-rules-file"
>  
>  But I'm glad you brought it up.  The funny thing is that even that
>  doesn't work properly nowadays *or* like it used to in the past.

	If this is true - haven't checked personally - then it's a bug.
(And a non-trivial one, the fact you're the first to report it
notwithstanding.)
	Can you please open a bug report?


			Respectfully,


				Robert Huff





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?23816.53518.998090.665606>