From owner-freebsd-questions@FreeBSD.ORG Mon Sep 26 16:08:54 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0E7C116A420 for ; Mon, 26 Sep 2005 16:08:54 +0000 (GMT) (envelope-from paul@pclark.me.uk) Received: from mra02.ch.as12513.net (mra02.ch.as12513.net [82.153.252.24]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0A2D943D70 for ; Mon, 26 Sep 2005 16:08:47 +0000 (GMT) (envelope-from paul@pclark.me.uk) Received: from localhost (localhost [127.0.0.1]) by mra02.ch.as12513.net (Postfix) with ESMTP id 73EBDD4651 for ; Mon, 26 Sep 2005 17:08:45 +0100 (BST) Received: from mra02.ch.as12513.net ([127.0.0.1]) by localhost (mra02.ch.as12513.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 30825-01-91 for ; Mon, 26 Sep 2005 17:08:44 +0100 (BST) Received: from paul1 (unknown [82.153.160.115]) by mra02.ch.as12513.net (Postfix) with ESMTP id EA910D4636 for ; Mon, 26 Sep 2005 17:08:43 +0100 (BST) From: "Paul" To: Date: Mon, 26 Sep 2005 17:08:45 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.5510 Thread-Index: AcXCosAKyjBCbMQLTomDjCe5ugSrcgAA2CVAAANUPBA= X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 In-reply-to: <0INF00A10HL98B@revere.dol.state.nj.us> Message-Id: <20050926160843.EA910D4636@mra02.ch.as12513.net> X-Virus-Scanned: by Eclipse VIRUSshield at eclipse.net.uk Subject: RE: IPFW won't go away! X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Sep 2005 16:08:54 -0000 Had a look in /etc/defaults/rc.conf and it was defaulted to "NO". -----------------My kernel config:--------------------- machine i386 cpu I686_CPU ident ATLANTIS # To statically compile in device wiring instead of /boot/device.hints #hints "GENERIC.hints" # Default places to look for devices. options SCHED_4BSD # 4BSD scheduler options INET # InterNETworking options INET6 # IPv6 communications protocols options FFS # Berkeley Fast Filesystem options SOFTUPDATES # Enable FFS soft updates support options UFS_ACL # Support for access control lists options UFS_DIRHASH # Improve performance on big directories options MD_ROOT # MD is a potential root device options NFSCLIENT # Network Filesystem Client options NFSSERVER # Network Filesystem Server options NFS_ROOT # NFS usable as /, requires NFSCLIENT options MSDOSFS # MSDOS Filesystem options CD9660 # ISO 9660 Filesystem options PROCFS # Process filesystem (requires PSEUDOFS) options PSEUDOFS # Pseudo-filesystem framework options GEOM_GPT # GUID Partition Tables. options COMPAT_43 # Compatible with BSD 4.3 [KEEP THIS!] options COMPAT_FREEBSD4 # Compatible with FreeBSD4 options SCSI_DELAY=15000 # Delay (in ms) before probing SCSI options KTRACE # ktrace(1) support options SYSVSHM # SYSV-style shared memory options SYSVMSG # SYSV-style message queues options SYSVSEM # SYSV-style semaphores options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions options KBD_INSTALL_CDEV # install a CDEV entry in /dev options AHC_REG_PRETTY_PRINT # Print register bitfields in debug # output. Adds ~128k to driver. options AHD_REG_PRETTY_PRINT # Print register bitfields in debug # output. Adds ~215k to driver. options ADAPTIVE_GIANT # Giant mutex is adaptive. options IPFIREWALL_DEFAULT_TO_ACCEPT device apic # I/O APIC # Bus support. Do not remove isa, even if you have no isa slots device isa device eisa device pci # Floppy drives device fdc # ATA and ATAPI devices device ata device atadisk # ATA disk drives device ataraid # ATA RAID drives device atapicd # ATAPI CDROM drives device atapifd # ATAPI floppy drives options ATA_STATIC_ID # Static device numbering # atkbdc0 controls both the keyboard and the PS/2 mouse device atkbdc # AT keyboard controller device atkbd # AT keyboard device psm # PS/2 mouse device vga # VGA video card driver device splash # Splash screen and screen saver support # syscons is the default console driver, resembling an SCO console device sc # Enable this for the pcvt (VT220 compatible) console driver #device vt #options XSERVER # support for X server on a vt console #options FAT_CURSOR # start with block cursor device agp # support several AGP chipsets # Floating point support - do not disable. device npx # Power management support (see NOTES for more options) device apm # Add suspend/resume support for the i8254. device pmtimer # Serial (COM) ports device sio # 8250, 16[45]50 based serial ports # Parallel port device ppc device ppbus # Parallel port bus (required) device lpt # Printer device plip # TCP/IP over parallel device ppi # Parallel port interface device #device vpo # Requires scbus and da # If you've got a "dumb" serial or parallel PCI card that is # supported by the puc(4) glue driver, uncomment the following # line to enable it (connects to the sio and/or ppc drivers): #device puc # PCI Ethernet NICs. device de # DEC/Intel DC21x4x (``Tulip'') device em # Intel PRO/1000 adapter Gigabit Ethernet Card device ixgb # Intel PRO/10GbE Ethernet Card device txp # 3Com 3cR990 (``Typhoon'') device vx # 3Com 3c590, 3c595 (``Vortex'') # PCI Ethernet NICs that use the common MII bus controller code. # NOTE: Be sure to keep the 'device miibus' line in order to use these NICs! device miibus # MII bus support device bfe # Broadcom BCM440x 10/100 Ethernet device bge # Broadcom BCM570xx Gigabit Ethernet device dc # DEC/Intel 21143 and various workalikes device fxp # Intel EtherExpress PRO/100B (82557, 82558) device lge # Level 1 LXT1001 gigabit ethernet device nge # NatSemi DP83820 gigabit ethernet device pcn # AMD Am79C97x PCI 10/100 (precedence over 'lnc') device re # RealTek 8139C+/8169/8169S/8110S device rl # RealTek 8129/8139 device sf # Adaptec AIC-6915 (``Starfire'') device sis # Silicon Integrated Systems SiS 900/SiS 7016 device sk # SysKonnect SK-984x & SK-982x gigabit Ethernet device ste # Sundance ST201 (D-Link DFE-550TX) device ti # Alteon Networks Tigon I/II gigabit Ethernet device tl # Texas Instruments ThunderLAN device tx # SMC EtherPower II (83c170 ``EPIC'') device vge # VIA VT612x gigabit ethernet device vr # VIA Rhine, Rhine II device wb # Winbond W89C840F device xl # 3Com 3c90x (``Boomerang'', ``Cyclone'') # ISA Ethernet NICs. pccard NICs included. device cs # Crystal Semiconductor CS89x0 NIC # 'device ed' requires 'device miibus' device ed # NE[12]000, SMC Ultra, 3c503, DS8390 cards device ex # Intel EtherExpress Pro/10 and Pro/10+ device ep # Etherlink III based cards device fe # Fujitsu MB8696x based cards device ie # EtherExpress 8/16, 3C507, StarLAN 10 etc. device lnc # NE2100, NE32-VL Lance Ethernet cards device sn # SMC's 9000 series of Ethernet chips device xe # Xircom pccard Ethernet # ISA devices that use the old ISA shims #device le # Wireless NIC cards device wlan # 802.11 support device an # Aironet 4500/4800 802.11 wireless NICs. device awi # BayStack 660 and others device wi # WaveLAN/Intersil/Symbol 802.11 wireless NICs. #device wl # Older non 802.11 Wavelan wireless NIC. # Pseudo devices. device loop # Network loopback device mem # Memory and kernel memory devices device io # I/O device device random # Entropy device device ether # Ethernet support device sl # Kernel SLIP device ppp # Kernel PPP device tun # Packet tunnel. device pty # Pseudo-ttys (telnet etc) device md # Memory "disks" device gif # IPv6 and IPv4 tunneling device faith # IPv6-to-IPv4 relaying (translation) # The `bpf' device enables the Berkeley Packet Filter. # Be aware of the administrative consequences of enabling this! device bpf # Berkeley packet filter # USB support device uhci # UHCI PCI->USB interface device ohci # OHCI PCI->USB interface device usb # USB Bus (required) #device udbp # USB Double Bulk Pipe devices device ugen # Generic device uhid # "Human Interface Devices" device ukbd # Keyboard device ulpt # Printer #device umass # Disks/Mass storage - Requires scbus and da device ums # Mouse #device urio # Diamond Rio 500 MP3 player #device uscanner # Scanners ------------------------ my rc.conf: ------------------------ #Network stuff hostname="nick.codepad.net" ifconfig_xl0="inet 192.168.0.71 netmask 255.255.255.0" gateway_enable="YES" named_enable="YES" #defaultrouter="192.168.0.101" ipnat_enable="YES" ipnat_rules="/etc/ipnat.rules" ipnat_program="/sbin/ipnat -CF -f" ipfilter_enable="YES" ipfilter_rules="/etc/ipf.rules" dhcpd_enable="YES" ipfw_enable="NO" firewall_enable="NO" #power management apm_enable="YES" #System daemons sshd_enable="YES" usbd_enable="YES" #Other deamons pureftpd_enable="YES" apache2_enable="YES" apache2ssl_enable="YES" mysql_enable="YES" #Random stuff local_startup="/usr/local/etc/rc.d" # -- sysinstall generated deltas -- # Tue Sep 20 22:08:35 2005 keymap="uk.iso" -----Original Message----- From: Bob Middaugh [mailto:bob.middaugh@comcast.net] Sent: 26 September 2005 15:29 To: 'Paul' Cc: freebsd-questions@freebsd.org Subject: RE: IPFW won't go away! Hi Paul, How about posting your rc.conf and kernel config file. You didn't happen to change the ipfw options in /etc/defaults/rc.conf, and maybe forgot? Bob > -----Original Message----- > From: owner-freebsd-questions@freebsd.org > [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Paul > Sent: Monday, September 26, 2005 10:01 AM > To: freebsd-questions@freebsd.org > Subject: Re: IPFW won't go away! > > Hi, > > > > Thanks for your responses so far. > > > > I have tried explicitly tried to disable it using: > ipfw_enable="NO" and firewall_enable="NO" in /etc/rc.conf > > > > My kernel configuration file doesn't contain any IPFIREWALL > options. I did try adding "options > IPFIREWALL_DEFAULT_TO_ACCEPT" and recompiling/installing but > that didn't work. > > > > Despite all of this it still loads up and by blocks > everything! - this means I have to type "ipfw disable > firewall" at every boot. I would prefer if it wasn't there > taking up cpu cycles. > > > > HELP! > > > > Paul > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org"