Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 25 Jan 2002 03:11:29 -0800
From:      Mike Makonnen <mike_makonnen@yahoo.com>
To:        "Crist J. Clark" <cjc@freebsd.org>
Cc:        arch@freebsd.org
Subject:   Re: Changing rc.conf(5) firewall_enable
Message-ID:  <200201251111.g0PBBTp18677@blackbox.pacbell.net>
In-Reply-To: <20020124222225.O87663@blossom.cjclark.org>
References:  <20020124222225.O87663@blossom.cjclark.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 24 Jan 2002 22:22:25 -0800
"Crist J. Clark" <cjc@freebsd.org> wrote:

> ... I don't think there are
> an machines out there running with firewalling built into the kernel
> with 'firewall_enable="NO"' who will have their security affected by
> such a change.

This should probably be mentioned in UPDATING.  Although the current
behaviour sounds counter-intuitive, who knows how many people have been
relying on it (explicitly or without knowing it). I know when I first
started using it I had the firewall compiled into the kernel, and it was
only after I started using the loadable module that I realized I had to
explicitly override firewall_enable in my rc.conf.

cheers,
mike makonnen

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200201251111.g0PBBTp18677>