From owner-freebsd-arch@FreeBSD.ORG  Thu Jul 17 06:39:48 2003
Return-Path: <owner-freebsd-arch@FreeBSD.ORG>
Delivered-To: freebsd-arch@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E638737B405
	for <arch@FreeBSD.org>; Thu, 17 Jul 2003 06:39:47 -0700 (PDT)
Received: from mail.speakeasy.net (mail8.speakeasy.net [216.254.0.208])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EA6B943FDD
	for <arch@FreeBSD.org>; Thu, 17 Jul 2003 06:39:46 -0700 (PDT)
	(envelope-from john@baldwin.cx)
Received: (qmail 32708 invoked from network); 17 Jul 2003 13:39:46 -0000
Received: from unknown (HELO server.baldwin.cx) ([216.27.160.63])
	(envelope-sender <john@baldwin.cx>)encrypted SMTP
	for <arch@FreeBSD.org>; 17 Jul 2003 13:39:46 -0000
Received: from zion.baldwin.cx (zion.baldwin.cx [192.168.0.7])
	by server.baldwin.cx (8.12.9/8.12.9) with ESMTP id h6HDdiGI025669;
	Thu, 17 Jul 2003 09:39:44 -0400 (EDT)
	(envelope-from john@baldwin.cx)
Received: from zion.baldwin.cx (localhost [127.0.0.1])
	by zion.baldwin.cx (8.12.9/8.12.9) with ESMTP id h6HDdiPg076411;
	Thu, 17 Jul 2003 09:39:44 -0400 (EDT)
	(envelope-from john@zion.baldwin.cx)
Received: by zion.baldwin.cx (8.12.9/8.12.9/Submit) id h6HDdiGf076410;
	Thu, 17 Jul 2003 09:39:44 -0400 (EDT)
From: John Baldwin <jhb@FreeBSD.org>
To: John-Mark Gurney <gurney_j@efn.org>
Date: Thu, 17 Jul 2003 09:05:18 -0400
User-Agent: KMail/1.5
References: <20030717080805.GA98878@dragon.nuxi.com>
	<20030717015052.B46015@xorpc.icir.org> <20030717085439.GC35337@funkthat.com>
In-Reply-To: <20030717085439.GC35337@funkthat.com>
MIME-Version: 1.0
Content-Disposition: inline
Message-Id: <200307170902.20004.jhb@FreeBSD.org>
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
cc: arch@FreeBSD.org
Subject: Re: Things to remove from /rescue
X-BeenThere: freebsd-arch@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussion related to FreeBSD architecture
	<freebsd-arch.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-arch>
List-Post: <mailto:freebsd-arch@freebsd.org>
List-Help: <mailto:freebsd-arch-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Jul 2003 13:39:48 -0000

On Thursday 17 July 2003 04:54 am, John-Mark Gurney wrote:
> Luigi Rizzo wrote this message on Thu, Jul 17, 2003 at 01:50 -0700:
> > On Thu, Jul 17, 2003 at 01:43:33AM -0700, John-Mark Gurney wrote:
> > > David O'Brien wrote this message on Thu, Jul 17, 2003 at 01:08 -0700:
> > > > - ipfw & natd & ipf & ipfs & ipfstat & ipmon & ipnan, why would one
> > > > needs these?  /rescue is to fix a borked /, not replace PicoBSD.
> > >
> > > ipfw I can see as useful.  If you have a kernel that defaults to
> > > closed, and you need to access the network, then this is a problem.  If
> > > we had
> >
> > actually, this is trivial to fix:
> >
> > 	sysctl net.inet.ip.fw.enable=0
>
> I didn't know about this. :)
>
> My objection to removing it has been removed. :)  I now support removing
> ipfw and friends (from /rescue).

I believe that sysctl only affects ipfw, so people using ipfilter might still
need ipf if ipfilter defaults to block as well.

-- 

John Baldwin <jhb@FreeBSD.org>  <><  http://www.FreeBSD.org/~jhb/
"Power Users Use the Power to Serve!"  -  http://www.FreeBSD.org/