Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 Jun 2009 04:39:08 -0400
From:      Michael Powell <nightrecon@verizon.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: enable IPFIREWALL_DEFAULT_TO_ACCEPT for GENERIC kernel
Message-ID:  <h1517r$3te$1@ger.gmane.org>
References:  <200906151144.34054.subbsd@gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
subbsd wrote:

> Hello maillist,
> 
> Whether there is a way for booting GENERIC kernel with
> ipfw_load="YES"
> 
> and
> 
> 65535 allow ip from any to any
> 
> rules without recompile kernel with options IPFIREWALL_DEFAULT_TO_ACCEPT ?
> 
> This is single options who force me customize my own kernel with freebsd-
> update.
> 
In your /etc/rc.conf:

firewall_enable="YES"	# Set to YES to enable firewall functionality

In addition to the above to activate include this below:

firewall_type="open"

IIRC that should do what you need. There is a list of the types and their 
function commented in the /etc/rc.firewall script.

-Mike






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?h1517r$3te$1>