Commit Graph

66 Commits

Author SHA1 Message Date
brian
8f8d0fb921 Remove extraneous space
PR:		11096
1999-04-12 15:26:41 +00:00
des
ddbdaee95c Allow the user to specify a different firewall script than /etc/rc.firewall. 1999-04-10 10:56:58 +00:00
imp
521f8bf828 Add two features:
log_in_vain:
	log_in_vain turns on logging for packets to ports for which
	there is no listener.
    rc.sysctl:
	A generic way to set sysctl values.  It reads /etc/syslog.conf
	and sets values based on that.  No /etc/syslog.conf has been
	checked in yet, and I've not added this to the makefile yet
	until I get more feedback.

Reviewed by: -current, -hackers and bde especially
1999-03-28 20:36:03 +00:00
brian
2346ab471b Move natd from network_pass3 to network_pass1 1999-03-24 10:28:49 +00:00
nate
e4e68ebddc - Mixup of kldstat arguments. Use '-i 1' instead of '-n 1' when checking
for the PCIC module in the kernel.

{ I promise this is the last commit! }

Submitted by:	"Sean O'Connell" <sean@stat.Duke.EDU>
1999-03-17 21:57:00 +00:00
nate
3577c68e0e Whoops, fixed typos in PCIC loading command when I modified Sean's
original patch.

Submitted by:	"Sean O'Connell" <sean@stat.Duke.EDU>
1999-03-17 20:57:40 +00:00
nate
4cbdb1d2a5 Add a Q&D test before loading the pcic module to make sure there isn't
a compiled in one.

Submitted by:	"Sean O'Connell" <sean@stat.Duke.EDU>
1999-03-17 17:39:50 +00:00
jfitz
823c8c7ca7 Add ${lpd_program} and ${portmap_program} as variables in rc.conf, with
suitable defaults pointing to the FreeBSD-shipped versions.  This will allow
for easier integration of third-party replacements for these daemons.
Reviewed by: Several members of -committers
1999-03-11 16:17:24 +00:00
hm
bead100195 fix cosmetic ISDN startup problem mentioned in PR conf/9957 1999-03-08 11:28:45 +00:00
jkh
889621dc3f Use /etc/defaults/rc.conf everywhere, falling back to /etc/rc.conf
as necessary (for half-assed upgrades).
1999-02-10 18:08:16 +00:00
dillon
f1556c0728 Revamp rc.diskless. Split into rc.diskless1 and rc.diskless2. provide
more opportunities for overriding.  Clean up /etc/rc ( remove conf_dir,
    remove startup mount special cases, remove other special cases )
1999-02-09 17:17:18 +00:00
markm
084fa3ca37 Add bits useful to getting laptops going (my Libretto in particular)
Add ActionTec v.90 modem and Libretto Floppy to pccard database;
Autoload pcic device.
1999-02-04 10:06:44 +00:00
joerg
142c86449d Add some special hooks for sppp(4) interfaces. In addition to the
normal ifconfig stuff, one might need to pass down authentication
parameters for them.

This is closely tied to Hellmuth's impending rc patches for ISDN, but
sppp can also be used separately (thus it doesn't go directly into the
planned ISDN section of rc.conf).

Reviewed by:	hm
1999-01-13 17:32:37 +00:00
hm
6eb51d5ea2 Integrate the ISDN subsystem into the /etc/rc framework
Reviewed by: Joerg Wunsch
1999-01-13 08:20:55 +00:00
jkh
be8be8dff8 Allow rwhod to take flags.
PR:		7705
Submitted by:	Johan Karlsson <k@numeri.campus.luth.se>
1999-01-03 22:19:23 +00:00
jkoshy
41ffaf98db Direct std{err,out} to /dev/null when invoking sysctl(8) for setting
`nfs_access_cache_timeout'.

Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
1998-11-27 07:06:11 +00:00
msmith
209dc4dbe8 Implement the nfs_access_cache variable, allowing us to set the timeout for
the NFS client's ACCESS cache.
1998-11-15 20:30:04 +00:00
peter
ed465e11cb kldload ipfw, it's installed always and works on both kernel formats 1998-11-11 05:23:44 +00:00
phk
daafcaf9d2 Avoid using dmesg to find devices, the buffer may not be big enough.
Reviewed by:	phk
Submitted by:	Mike Spengler <mks@networkcs.com>
1998-10-08 08:56:01 +00:00
phk
ed7805dad4 Here are some scripts and man pages for configuring HARP ATM
interfaces.

Reviewed by:	phk
Submitted by:	Mike Spengler <mks@networkcs.com>
1998-10-06 19:24:31 +00:00
cracauer
a247cb7384 rc.conf variable $amd_map_program needs to be eval'ed.
PR:		misc/7435
Submitted by:	David Wolfskill <dhw@whistle.com>
1998-09-16 20:38:23 +00:00
jkoshy
fda94a0862 Turn off replies to ICMP echo requests for broadcast and multicast
addresses by default.

Add a knob "icmp_bmcastecho" to "rc.network" to allow this
behaviour to be controlled from "rc.conf".

Document the controlling sysctl variable "net.inet.icmp.bmcastecho"
in sysctl(3).

Reviewed by: dg, jkh
Reminded on -hackers by: Steinar Haug <sthaug@nethelp.no>
1998-09-15 10:49:03 +00:00
phk
eb0e78dfd2 tcp_extensions now only applies to RFC1323 1998-09-06 08:20:11 +00:00
phk
0aae3f69f8 In /etc/rc.network, near line 242, setting up Kerberos,
variable "stash_flag" is set.  A few lines later, it is evaluated
as "stash_flags" with a trailing "s", and then a bit later the
singular version is unset.

PR:		7609
Reviewed by:	phk
Submitted by:	Walt Howard <howard@ee.utah.edu>
1998-08-14 06:55:17 +00:00
brian
7af720c752 Add Id keyword. 1998-08-10 19:54:12 +00:00
nectar
d2e760ca5d Allow either an IP address or an interface to be specified in
the rc.conf variable ``natd_interface''.  rc.network will
determine whether it is an IP address or an interface name,
and invoke natd with the -a or -n flag as appropriate.

PR:				6947
Reviewed by:	jkh@FreeBSD.ORG
1998-07-08 15:40:53 +00:00
steve
fb45255db6 Cleanup natd startup test.
PR:		6946
Submitted by:	Jacques Vidrine <n@nectar.com>
1998-06-14 16:31:03 +00:00
jkh
d34863be0b cosmetic: clean up startup messages and rearrange some options
to go in a more proper order.
1998-05-19 04:36:31 +00:00
andreas
8145a6c88b Overlooked, that newer naming convention is xxx_program instead of xxx_prog.
So changed it to ntpdate_program and xntpd_program.
Backout last change, now we have again named_program, sorry.
1998-05-06 17:36:16 +00:00
andreas
f208c4f3bc Add variables for the ntpdate and xntpd program, you might want
to run the binaries from the new ntp v4 port.
1998-05-05 21:14:27 +00:00
phk
94cad26368 Jean-Simon Pendry's paper on amd refers to the use of "ypcat -k"
against the "master map" to get the list of mount point/amd map
correspondences, and using that list as command-line arguments to start
amd.

When I tried to do this with the existing /etc/rc* scripts, I found that
I couldn't do this by modifying only /etc/rc.conf:  that file gets
sourced very early by /etc/rc, well before any networking functionality
is present, let alone NIS.  Further, I wasn't able to figure out a way
to use various levels & types of quoting to defer evaluation of the
string to a point subsequent to NIS initialization.

As a result, I resorted to hacking /etc/rc.network -- but I did it in a
way that ought to be reasonably general, and avoid breakage for anyone
else.

PR:		6387
Reviewed by:	phk
Submitted by:	David Wolfskill <dhw@whistle.com>
1998-04-26 06:32:13 +00:00
brian
7ecfe342d3 Add natd support.
PR:		6339
Submitted by:	cdillon@wolves.k12.mo.us
1998-04-18 10:27:19 +00:00
markm
0857ed870e Enable the SecureRPC bits in rc.conf, if the Administrator wants them. 1998-04-12 09:47:43 +00:00
danny
c346c63a3a Submitted by: bde
Back out last brain blip.
1998-03-13 22:03:03 +00:00
danny
653c61455a Change examples for Cyclades cards (c -> c0) to fit with reality. 1998-03-13 13:33:09 +00:00
jkh
7aeb442db4 Allow rarpd to be started from rc.conf
PR:		5457
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
1998-03-09 08:50:30 +00:00
brian
d08ced9c76 Remove useless argument to ``. start_if.$ifn''
Pointed out by: Tim Tsai <tim@futuresouth.com>
1998-02-20 14:45:06 +00:00
guido
2ac8557aac Add 2 new rc.conf variables:
forward_sourceroute : controls setting of existing net.inet.ip.sourceroute
accept_sourceroute : control setting of new net.inet.ip.accept_sourceroute
1998-02-16 19:21:32 +00:00
alex
7d804691d2 Avoid using grep when determining ipfw's default policy -- it may not
be available at this stage of the boot if /usr is NFS mounted.
1998-02-14 04:12:23 +00:00
alex
df83d23eb1 Don't assume that IP services are disabled just because firewall_enable
is not set to YES in rc.conf.

Noticed by:	Mikael Karpberg <karpen@ocean.campus.luth.se>
1998-02-07 04:56:56 +00:00
wollman
5b5760d2a7 Add an additional `named_program' variable so that we can easily choose
between 4.9.6 and the port of 8.x.
1998-02-01 00:20:56 +00:00
alex
31dc991835 Compare return code from ipfw against 0 for success instead of == 1
for error.

Pointed out by:	Matthew Thyer <thyerm@camtech.net.au>
1998-01-10 03:33:39 +00:00
obrien
c3153a7af5 MF 22s 1997-12-01 06:11:34 +00:00
sef
c679020e14 Allow the system to be configured to pass "-n" to kerberos and
kadmind or not; also, only run kadmind on a non-slave server.  Man
page for rc.conf is also updated.

Reviewed by:	Mark Murray
1997-11-07 20:45:48 +00:00
danny
19ea78c7dd Fix some problems in the rules file loading and need for modload detection.
Found by: "James E. Housley" <housley@pr-comm.com>
1997-09-18 22:43:48 +00:00
danny
1bac7344dc Reviewed by: msmith, alex
Cosmetic changes to the loading of firewall rules and lkm.
1997-09-11 10:59:02 +00:00
pst
41b14158ce Merge from 2.2 (tcp extensions in phase 1) 1997-07-06 00:33:34 +00:00
jkh
4425a718ba Neaten up some things which were inconsistent, add a few more flags
to things which need them, general cleanup.
Submitted by:	Brian Somers <brian@awfulhak.org>
1997-05-19 07:46:51 +00:00
jkh
25fe4b46c7 Add arp_proxyall knob.
Submitted by:	Christoph Kukulies <kuku@gilberto.physik.RWTH-Aachen.DE>
1997-05-13 08:22:27 +00:00
jkh
9a3d5ad940 Update the etc world from RELENG_2_2 which is now more up-to-date
(gotta get myself -current again, this is a drag).

Also-fixes-problems-noted-by: Wolfgang Helbig & Joerg Wunsch
1997-05-03 11:22:17 +00:00