Re: Things to remove from /rescue

From: Robert Watson (rwatson_at_freebsd.org)
Date: 07/18/03

  • Next message: David O'Brien: "Re: Things to remove from /rescue"
    Date: Fri, 18 Jul 2003 13:07:04 -0400 (EDT)
    To: Bosko Milekic <bmilekic@technokratis.com>
    
    

    On Fri, 18 Jul 2003, Bosko Milekic wrote:

    > On Fri, Jul 18, 2003 at 07:44:38AM -0700, Wes Peters wrote:
    > [...]
    > > > I believe that sysctl only affects ipfw, so people using ipfilter might
    > > > still need ipf if ipfilter defaults to block as well.
    > >
    > > It would seem advisable to add such a sysctl for ipfilter. Any
    > > objections, Darren?
    >
    > How about having both ipfw and ipfilter check the same sysctl 'allow
    > all by default' knob?

    Well, there are actually people who run with both, and you can probably
    fairly easily imagine scenarios where you'd want them to be independent.
    Also, you don't want management tools to be confused about which they're
    twiddling.

    Robert N M Watson FreeBSD Core Team, TrustedBSD Projects
    robert@fledge.watson.org Network Associates Laboratories

    _______________________________________________
    freebsd-arch@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-arch
    To unsubscribe, send any mail to "freebsd-arch-unsubscribe@freebsd.org"


  • Next message: David O'Brien: "Re: Things to remove from /rescue"

    Relevant Pages

    • Re: Things to remove from /rescue
      ... >> I believe that sysctl only affects ipfw, ... >> still need ipf if ipfilter defaults to block as well. ... > It would seem advisable to add such a sysctl for ipfilter. ...
      (freebsd-arch)
    • Re: Things to remove from /rescue
      ... On Thursday 17 July 2003 06:05 am, John Baldwin wrote: ... > I believe that sysctl only affects ipfw, ... > still need ipf if ipfilter defaults to block as well. ... It would seem advisable to add such a sysctl for ipfilter. ...
      (freebsd-arch)