Commit Graph

113 Commits

Author SHA1 Message Date
Yoshinobu Inoue
03172c2b49 IPv6 related configuration updates.
- 6to4(stf) interface configuration.
  - Static route configuration.
  - Comment additions.
  - Replaced a still existed '@' to '%' in IPv6 scoped addr format.
    (This became necessary as previous IPv6 scoped addr format change.)

Much thanks to ume, who helped me reviewing, testing, and finding problems
with these changes.

Approved by: jkh

Reviewed by: ume
2000-03-12 20:35:54 +00:00
Yoshinobu Inoue
d499929ea1 Prevent multicast packets from being sent over stf0 interface,
to avoid error messages printed on /var/log/messages.

  Recently added "stf" interface has IFF_MULTICAST bit set,
  because IPv6 don't work on non IFF_MULTICAST set interfaces
  in current implementation.
  But "stf" interface is multi-dest IPv6 over IPv4 tunnel, so
  can't treat multicast packet with no special configuration.

  On the other hand, tools like "rtadvd", "pim6dd", "pim6sd"
  send messages on IFF_MULTICAST set interfaces by default.
  So there will be many bogus error message on /var/log/messages,
  that multicast packets sent to "stf0" failed.

  So,

   -strip "stf0" from rtadvd sending interfaces in rc.network6
    ("rtadvd" is a daemon used only for local subnet, so it
     will never need to send its packets over "stf0" interfaces.)

   -Add default configuration files for "pim6dd" and "pim6sd",
    and disable "stf0" in those files.

Approved by: jkh
2000-03-11 20:10:39 +00:00
Jordan K. Hubbard
12324b777c cosmetic fix - add a space. 2000-02-29 12:53:28 +00:00
Mark Murray
20fb384ee0 Get the order of things right; the keys need to be generated
early to allow entropy to replenish.
sshd must start late to catch the full effects of ldconfig.
2000-02-28 19:54:06 +00:00
Jordan K. Hubbard
49923df12d Generate new sshd host key when necessary. I'm tired of
waiting for someone to commit this. :)
2000-02-28 19:21:05 +00:00
Mark Murray
93e3e5e9e3 Run sshd at boot time if the sysadmin wants it. Also install
ssh[d] config files in the right place.
2000-02-24 23:12:04 +00:00
Yoshinobu Inoue
93f80500f6 -Remove IPv6 initialization failed interfaces from the list of
interfaces passed to rtadvd
-Comment out example sentences more completely
-Redirect error message of ifconfig output into /dev/null, to correctly
 find out working IPv6 interfaces

Approved by: jkh
2000-02-24 18:52:58 +00:00
Yoshinobu Inoue
60823f50c0 -Removed unnecessary use of awk.
-small comment fix.

Approved by: jkh

Submitted by:  Chris Costello <chris@calldei.com>
2000-02-24 06:51:03 +00:00
Yoshinobu Inoue
0908c83946 Add IPv6 configuration scripts.
Initial version created by, and kindly much tested by:
	bmah@CA.Sandia.GOV (Bruce A. Mah)

Approved by: jkh

Reviewed by: bmah@CA.Sandia.GOV (Bruce A. Mah),
	Ollivier Robert <roberto@keltia.freenix.fr>
Obtained from: KAME project
2000-02-23 18:05:58 +00:00
Poul-Henning Kamp
6fdb2d8e5c No arguments needed for fore_dnld any longer.
Approved by:	jkh
2000-02-15 13:21:43 +00:00
Hellmuth Michaelis
6945eda6ea Approved by: jkh
Reviewed by: joerg

The isdnd is able to listen on a socket for isdnmonitor to connect to
it to remotely control it (similar to ppp and pppctl). When this is
enabled in the isdnd config file, it will fail currently because isdnd
is started before the network interfaces are configured.
It is necessary to move the isdnd start after the ifconfig of the network
interfaces, then this problem will not occur.
2000-02-06 16:33:54 +00:00
Chris Costello
64304d8c44 Add and document support for handling comments and blank lines
in /etc/sysctl.conf.

Reviewed by:	imp, jkh
2000-01-16 18:12:42 +00:00
Brian Feldman
ab80d6fabc This is another in Martin Blapp's N-series of mount-related cleanups :)
Changes are:
 - rpc.umntall is called at the right places now in /etc/rc*
 - rpc.umntall timeout has been lowered from two days (too high) to one
 - verbose messages in rpc.umntall have been clarified
 - kill double entries in /var/db/mounttab when rpc.umntall is invoked
 - ${early_nfs_mounts} has been removed from /etc/rc
 - patched mount(8) -p to print different pass/dump values for ufs filesystems.
   (last patch recieved from dan <bugg@bugg.strangled.net>)

Submitted by:	Martin Blapp <mbr@imp.ch>, dan <bugg@bugg.strangled.net>
2000-01-15 14:28:14 +00:00
Luigi Rizzo
4f9b3f5f33 Cleanup diskless support in current, mostly aligning it to the one
in the 3.x branch. Also remove the dependency on /usr to find the
boot address/interface.
Mostly-submitted-abd-tested-by: MIHIRA Sanpei Yoshiro <sanpei@sanpei.org>
2000-01-06 18:17:38 +00:00
Ollivier Robert
83a8718b84 xntpd -> ntpd.
Submitted by:	ru
1999-12-17 13:36:40 +00:00
David E. O'Brien
278bd49cc8 Suport multiple ``ifconfig_*?="DHCP"'' configurations.
Currently we have a problem in that `dhclient' bails when configuring the
second interface as port 68 is already in use (by the `dhclient' started
for the first interface).

PR:		14810
Submitted by:	n_hibma
1999-12-12 01:58:30 +00:00
Warner Losh
b11b638301 Now that pccardc beep actually works, add knob for it in rc.conf/rc.pccard
Submitted by: sanpei@sanpei.org (MIHIRA-san Yoshiro)
1999-12-02 19:48:16 +00:00
Brian Somers
2d904a8ba9 Oops, typo 1999-11-23 00:26:03 +00:00
Brian Somers
6c62fd3e55 Add pppoed startup options 1999-11-23 00:22:25 +00:00
Andrey A. Chernov
08221ae7d5 Add network pass4 - after all local (/usr/local/etc/rc.d f.e.)
daemons started. Move log_in_vain option there. It is needed to avoid
lot of connections to port 80 logged on production WWW server prior
Apache started from /usr/local/etc/rc.d
1999-11-17 22:38:02 +00:00
Andrey A. Chernov
319f15a262 Add single_mountd_enable hook to run mountd but not NFS server
Needed for machine with CFS but without real NFS
1999-11-14 21:28:13 +00:00
Brian Feldman
eb0519dbda Make the firewall file variable space-safe. 1999-09-19 21:32:42 +00:00
Peter Wemm
6cabfb3832 Add/adjust some $FreeBSD$ tags.
Noted by:	Doug <Doug@gorean.org>
1999-09-13 17:09:08 +00:00
Sheldon Hearn
321704296f Apply a consistent style to most of the etc scripts. Particularly, use
case instead of test where appropriate, since case allows case is a sh
builtin and (as a side-effect) allows case-insensitivity.

Changes discussed on freebsd-hackers.

Submitted by:	Doug Barton <Doug@gorean.org>
1999-09-13 15:44:20 +00:00
Dag-Erling Smørgrav
e46cd3d4d2 Add the net.inet.tcp.restrict_rst and net.inet.tcp.drop_synfin sysctl
variables, conditional on the TCP_RESTRICT_RST and TCP_DROP_SYNFIN kernel
options, respectively. See the comments in LINT for details.
1999-09-12 17:22:08 +00:00
Peter Wemm
805e4f2d64 -background is also a legitimate ppp mode. Don't change it to -auto. 1999-09-01 08:57:01 +00:00
Peter Wemm
9b7a44a60e $Id$ -> $FreeBSD$ 1999-08-27 23:37:10 +00:00
Jordan K. Hubbard
50b14091b7 Catch an extra X on DHCP.
Spotted by the eagle eyes of:	Pierre DAVID <Pierre.David@prism.uvsq.fr>
1999-08-27 22:15:15 +00:00
Sheldon Hearn
8ce51e77e2 Small whitespace change to fix run-over lines introduced in the previous
commit.

Reported by:	bde
1999-08-27 10:59:40 +00:00
Sheldon Hearn
b68adff6b7 Style clean-up:
* All variables are now embraced: ${foo}

	* All comparisons against some value now take the form:
	  [ "${foo}" ? "value" ]
	  where ? is a comparison operator

	* All empty string tests now take the form:
	  [ -z "${foo}" ]

	* All non-empty string tests now take the form:
	  [ -n "${foo}" ]

Submitted by:	jkh
1999-08-25 16:01:45 +00:00
Brian Somers
cdd53d9ce9 ppp_alias -> ppp_nat
Submitted by: Josef L. Karthauser <joe@FreeBSD.org.uk>
1999-08-22 23:26:05 +00:00
Brian Somers
b6bc698bc1 Quieten ppp at startup. 1999-08-19 21:15:16 +00:00
Dag-Erling Smørgrav
18d3153ead Add net.inet.icmp.log_redirect and net.inet.icmp.drop_redirect, for
respectively logging and dropping ICMP REDIRECT packets.

Note that there is no rate limiting on the log messages, so log_redirect
should be used with caution (preferrably only for debugging purposes).
1999-08-10 09:45:33 +00:00
Brian Somers
73fac075b2 Start ppp before natd, not afterwards.
Submitted by: Josef L. Karthauser <joe@uk.FreeBSD.org>
1999-07-26 15:17:23 +00:00
Brian Somers
51f80ae148 Add a default ppp.conf (mode 600).
Originally submitted by: Wayne Self <wself@cdrom.com>

Allow a ppp startup option in rc.conf.

Adjust sysinstall so that it appends to the end of ppp.conf
and uses the generated profile to start ppp in auto mode on
boot.

Submitted by: Josef L. Karthauser <joe@uk.FreeBSD.org>
1999-07-26 10:49:37 +00:00
David E. O'Brien
85acfe393e Don't background pccardd, it nullfies the "-z" flag. pccardd itself
daemonizes, lets just let things progress normally.
1999-07-26 01:08:16 +00:00
Jordan K. Hubbard
e98e9050af Allow DHCP to be used in an ifconfig variable instead of the usual
address information, producing the obvious effect (dhcp configuration).

Submitted by:   "Sean O'Connell" <sean@stat.Duke.EDU>
1999-07-16 09:26:53 +00:00
Peter Wemm
d45821b19b Tweak previous commit. Only sense the configuration if network_interfaces
is set to "auto".  Any network_interfaces settings will be treated as
before.
1999-07-08 18:56:04 +00:00
Peter Wemm
9c65a84aea Do away with ${network_interfaces} in rc.conf. Just use ifconfig -l to
get a list of interfaces, and then automatically configure them if
${ifconfig_${ifn}} or /etc/start_if.${ifn} exists.

This makes it a lot easier to deal with machines that constantly change
their network configuration as you can leave ifconfig settings for all
the possible cards - just the ones that are present will be configured.
1999-07-07 12:49:47 +00:00
Tatsumi Hosokawa
c5f6486175 Removed my name and (old) e-mail address from comments. 1999-07-07 01:26:55 +00:00
Tatsumi Hosokawa
8076c80767 Added pccard_conf parameter to /etc/rc.conf,
and set it to "/etc/pccard.conf.sample" in /etc/defaults/rc.conf.
Perhaps this default value can be inappropriate,
but I set to this value for the convenience of PC-card boot.flp users.
Please correct it if there are better solutions.
1999-07-07 01:19:15 +00:00
Tatsumi Hosokawa
6d0cab6541 Added "pccardd_flags" for rc.conf. 1999-07-04 14:41:20 +00:00
Brian Somers
b25d26374e If amd_flags is empty, don't add -p as it makes amd abend. 1999-06-08 13:00:30 +00:00
Bruce Evans
7389b9fd55 Don't discard error output from sysctl(8).
Do discard standard output from the sysctl for approxy_all, and echo
what this sysctl is doing in the usual way.  This fix is probably
backwards.  We should probably just use the standard sysctl output
in all cases (it needs to have a newline filtered out).

Echo what the sysctls for nfs_reserved_port_only and nfs_access_cache
are doing.
1999-06-05 12:06:19 +00:00
Poul-Henning Kamp
2c7b227278 Add handle to control global TCP keepalives and turn them on as
default.

Despite their name it doesn't keep TCP sessions alive, it kills
them if the other end has gone AWOL.  This happens a lot with
clients which use NAT, dynamic IP assignment or which has a 2^32
* 10^-3 seconds upper bound on their uptime.

There is no detectable increase in network trafic because of this:
two minimal TCP packets every two hours for a live TCP connection.

Many servers already enable keepalives themselves.

The host requirements RFC is 10 years old, and doesn't know about
the loosing clients of todays InterNet.
1999-06-05 05:45:57 +00:00
Mark Murray
02f0393e5a This has bitrotted to the state that it is no longer functional.
Make Mike Smith very happy by nuking the PCIC auto-load code. :-)

NOTE - You will have to have PCIC in your kernel again!!
You have been warned!!
1999-05-05 19:34:29 +00:00
Dima Ruban
ee2071b83d Use ``grep -w'' to prevent catching "pcic_pci" 1999-05-04 08:34:55 +00:00
Brian Somers
b9a5e41806 Remove extraneous space
PR:		11096
1999-04-12 15:26:41 +00:00
Dag-Erling Smørgrav
3e297f8d95 Allow the user to specify a different firewall script than /etc/rc.firewall. 1999-04-10 10:56:58 +00:00
Warner Losh
a780977066 Add two features:
log_in_vain:
	log_in_vain turns on logging for packets to ports for which
	there is no listener.
    rc.sysctl:
	A generic way to set sysctl values.  It reads /etc/syslog.conf
	and sets values based on that.  No /etc/syslog.conf has been
	checked in yet, and I've not added this to the makefile yet
	until I get more feedback.

Reviewed by: -current, -hackers and bde especially
1999-03-28 20:36:03 +00:00