From owner-svn-src-all@freebsd.org  Mon Jun  6 17:24:15 2016
Return-Path: <owner-svn-src-all@freebsd.org>
Delivered-To: svn-src-all@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 11E96B6DD68;
 Mon,  6 Jun 2016 17:24:15 +0000 (UTC)
 (envelope-from lidl@FreeBSD.org)
Received: from hydra.pix.net (hydra.pix.net [IPv6:2001:470:e254::4])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "mail.pix.net", Issuer "Pix.Com Technologies,
 LLC CA" (not verified))
 by mx1.freebsd.org (Postfix) with ESMTPS id D1C1719D2;
 Mon,  6 Jun 2016 17:24:14 +0000 (UTC)
 (envelope-from lidl@FreeBSD.org)
Received: from torb.pix.net (torb.pix.net [192.168.16.32])
 (authenticated bits=0)
 by hydra.pix.net (8.15.2/8.15.2) with ESMTPA id u56HOD7N065872;
 Mon, 6 Jun 2016 13:24:13 -0400 (EDT) (envelope-from lidl@FreeBSD.org)
Reply-To: lidl@FreeBSD.org
Subject: Re: svn commit: r301226 - in head: etc etc/defaults
 etc/periodic/security etc/rc.d lib lib/libblacklist libexec
 libexec/blacklistd-helper share/mk tools/build/mk usr.sbin
 usr.sbin/blacklistctl usr.sbin...
References: <201606021906.u52J649H019481@repo.freebsd.org>
 <BC308CA2-2EE2-448A-9641-0BB769045868@gmail.com>
 <90df7c5b-7680-3de0-68ba-ab9bd1c9d73e@FreeBSD.org>
 <1465232404.1188.5.camel@freebsd.org>
 <9aafd3b8-ebe2-5ac8-e91b-31ffed34eff1@freebsd.org>
 <1465233764.1188.9.camel@freebsd.org>
To: Ian Lepore <ian@freebsd.org>, Andrey Chernov <ache@freebsd.org>,
 Matteo Riondato <rionda@gmail.com>
Cc: src-committers@freebsd.org, svn-src-all@freebsd.org,
 svn-src-head@freebsd.org
From: Kurt Lidl <lidl@FreeBSD.org>
Message-ID: <6e7969d9-47e2-cf79-907a-4a67c1a5b019@FreeBSD.org>
Date: Mon, 6 Jun 2016 13:24:13 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0)
 Gecko/20100101 Thunderbird/45.1.1
MIME-Version: 1.0
In-Reply-To: <1465233764.1188.9.camel@freebsd.org>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: svn-src-all@freebsd.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "SVN commit messages for the entire src tree \(except for &quot;
 user&quot; and &quot; projects&quot; \)" <svn-src-all.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/svn-src-all>,
 <mailto:svn-src-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-all/>
List-Post: <mailto:svn-src-all@freebsd.org>
List-Help: <mailto:svn-src-all-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/svn-src-all>,
 <mailto:svn-src-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 06 Jun 2016 17:24:15 -0000

On 6/6/16 1:22 PM, Ian Lepore wrote:
> No, it should still not be enabled by default.  Maybe it should be
> enabled in response to some question in the installer, or maybe even
> better, enabled only if some firewall software that understands it is
> also enabled.  But afaik, all the available firewalls are disabled by
> default in defaults/rc.conf, and this should be too.

I have already committed a change to turn it off by default.

-Kurt