Commit Graph

165 Commits

Author SHA1 Message Date
Dag-Erling Smørgrav
3e297f8d95 Allow the user to specify a different firewall script than /etc/rc.firewall. 1999-04-10 10:56:58 +00:00
Warner Losh
a780977066 Add two features:
log_in_vain:
	log_in_vain turns on logging for packets to ports for which
	there is no listener.
    rc.sysctl:
	A generic way to set sysctl values.  It reads /etc/syslog.conf
	and sets values based on that.  No /etc/syslog.conf has been
	checked in yet, and I've not added this to the makefile yet
	until I get more feedback.

Reviewed by: -current, -hackers and bde especially
1999-03-28 20:36:03 +00:00
Brian Somers
cff5e07509 Move natd from network_pass3 to network_pass1 1999-03-24 10:28:49 +00:00
Nate Williams
73f4b721ae - Mixup of kldstat arguments. Use '-i 1' instead of '-n 1' when checking
for the PCIC module in the kernel.

{ I promise this is the last commit! }

Submitted by:	"Sean O'Connell" <sean@stat.Duke.EDU>
1999-03-17 21:57:00 +00:00
Nate Williams
265bb91203 Whoops, fixed typos in PCIC loading command when I modified Sean's
original patch.

Submitted by:	"Sean O'Connell" <sean@stat.Duke.EDU>
1999-03-17 20:57:40 +00:00
Nate Williams
6f88981745 Add a Q&D test before loading the pcic module to make sure there isn't
a compiled in one.

Submitted by:	"Sean O'Connell" <sean@stat.Duke.EDU>
1999-03-17 17:39:50 +00:00
James FitzGibbon
1dd418124c Add ${lpd_program} and ${portmap_program} as variables in rc.conf, with
suitable defaults pointing to the FreeBSD-shipped versions.  This will allow
for easier integration of third-party replacements for these daemons.
Reviewed by: Several members of -committers
1999-03-11 16:17:24 +00:00
Hellmuth Michaelis
8d30de0d26 fix cosmetic ISDN startup problem mentioned in PR conf/9957 1999-03-08 11:28:45 +00:00
Jordan K. Hubbard
9c63624e6f Use /etc/defaults/rc.conf everywhere, falling back to /etc/rc.conf
as necessary (for half-assed upgrades).
1999-02-10 18:08:16 +00:00
Matthew Dillon
e4715b9359 Revamp rc.diskless. Split into rc.diskless1 and rc.diskless2. provide
more opportunities for overriding.  Clean up /etc/rc ( remove conf_dir,
    remove startup mount special cases, remove other special cases )
1999-02-09 17:17:18 +00:00
Mark Murray
ba529ee910 Add bits useful to getting laptops going (my Libretto in particular)
Add ActionTec v.90 modem and Libretto Floppy to pccard database;
Autoload pcic device.
1999-02-04 10:06:44 +00:00
Joerg Wunsch
8a173970c1 Add some special hooks for sppp(4) interfaces. In addition to the
normal ifconfig stuff, one might need to pass down authentication
parameters for them.

This is closely tied to Hellmuth's impending rc patches for ISDN, but
sppp can also be used separately (thus it doesn't go directly into the
planned ISDN section of rc.conf).

Reviewed by:	hm
1999-01-13 17:32:37 +00:00
Hellmuth Michaelis
49c3b47aae Integrate the ISDN subsystem into the /etc/rc framework
Reviewed by: Joerg Wunsch
1999-01-13 08:20:55 +00:00
Jordan K. Hubbard
539fb1799a Allow rwhod to take flags.
PR:		7705
Submitted by:	Johan Karlsson <k@numeri.campus.luth.se>
1999-01-03 22:19:23 +00:00
Joseph Koshy
8dbc5051b3 Direct std{err,out} to /dev/null when invoking sysctl(8) for setting
`nfs_access_cache_timeout'.

Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
1998-11-27 07:06:11 +00:00
Mike Smith
cda43ef612 Implement the nfs_access_cache variable, allowing us to set the timeout for
the NFS client's ACCESS cache.
1998-11-15 20:30:04 +00:00
Peter Wemm
2bfb2faded kldload ipfw, it's installed always and works on both kernel formats 1998-11-11 05:23:44 +00:00
Poul-Henning Kamp
0e8380df1f Avoid using dmesg to find devices, the buffer may not be big enough.
Reviewed by:	phk
Submitted by:	Mike Spengler <mks@networkcs.com>
1998-10-08 08:56:01 +00:00
Poul-Henning Kamp
7d5c779c86 Here are some scripts and man pages for configuring HARP ATM
interfaces.

Reviewed by:	phk
Submitted by:	Mike Spengler <mks@networkcs.com>
1998-10-06 19:24:31 +00:00
Martin Cracauer
47aabea273 rc.conf variable $amd_map_program needs to be eval'ed.
PR:		misc/7435
Submitted by:	David Wolfskill <dhw@whistle.com>
1998-09-16 20:38:23 +00:00
Joseph Koshy
61a4defd54 Turn off replies to ICMP echo requests for broadcast and multicast
addresses by default.

Add a knob "icmp_bmcastecho" to "rc.network" to allow this
behaviour to be controlled from "rc.conf".

Document the controlling sysctl variable "net.inet.icmp.bmcastecho"
in sysctl(3).

Reviewed by: dg, jkh
Reminded on -hackers by: Steinar Haug <sthaug@nethelp.no>
1998-09-15 10:49:03 +00:00
Poul-Henning Kamp
e5d237d4b9 tcp_extensions now only applies to RFC1323 1998-09-06 08:20:11 +00:00
Poul-Henning Kamp
a6587b5772 In /etc/rc.network, near line 242, setting up Kerberos,
variable "stash_flag" is set.  A few lines later, it is evaluated
as "stash_flags" with a trailing "s", and then a bit later the
singular version is unset.

PR:		7609
Reviewed by:	phk
Submitted by:	Walt Howard <howard@ee.utah.edu>
1998-08-14 06:55:17 +00:00
Brian Somers
f10b49c852 Add Id keyword. 1998-08-10 19:54:12 +00:00
Jacques Vidrine
e4e737cd85 Allow either an IP address or an interface to be specified in
the rc.conf variable ``natd_interface''.  rc.network will
determine whether it is an IP address or an interface name,
and invoke natd with the -a or -n flag as appropriate.

PR:				6947
Reviewed by:	jkh@FreeBSD.ORG
1998-07-08 15:40:53 +00:00
Steve Price
a164ecc61b Cleanup natd startup test.
PR:		6946
Submitted by:	Jacques Vidrine <n@nectar.com>
1998-06-14 16:31:03 +00:00
Jordan K. Hubbard
80b41362fb cosmetic: clean up startup messages and rearrange some options
to go in a more proper order.
1998-05-19 04:36:31 +00:00
Andreas Klemm
90f94d55c1 Overlooked, that newer naming convention is xxx_program instead of xxx_prog.
So changed it to ntpdate_program and xntpd_program.
Backout last change, now we have again named_program, sorry.
1998-05-06 17:36:16 +00:00
Andreas Klemm
a8f00855a1 Add variables for the ntpdate and xntpd program, you might want
to run the binaries from the new ntp v4 port.
1998-05-05 21:14:27 +00:00
Poul-Henning Kamp
4cb3dec38f Jean-Simon Pendry's paper on amd refers to the use of "ypcat -k"
against the "master map" to get the list of mount point/amd map
correspondences, and using that list as command-line arguments to start
amd.

When I tried to do this with the existing /etc/rc* scripts, I found that
I couldn't do this by modifying only /etc/rc.conf:  that file gets
sourced very early by /etc/rc, well before any networking functionality
is present, let alone NIS.  Further, I wasn't able to figure out a way
to use various levels & types of quoting to defer evaluation of the
string to a point subsequent to NIS initialization.

As a result, I resorted to hacking /etc/rc.network -- but I did it in a
way that ought to be reasonably general, and avoid breakage for anyone
else.

PR:		6387
Reviewed by:	phk
Submitted by:	David Wolfskill <dhw@whistle.com>
1998-04-26 06:32:13 +00:00
Brian Somers
252ba33d3c Add natd support.
PR:		6339
Submitted by:	cdillon@wolves.k12.mo.us
1998-04-18 10:27:19 +00:00
Mark Murray
c1d639d22f Enable the SecureRPC bits in rc.conf, if the Administrator wants them. 1998-04-12 09:47:43 +00:00
Daniel O'Callaghan
9662bb4f03 Submitted by: bde
Back out last brain blip.
1998-03-13 22:03:03 +00:00
Daniel O'Callaghan
9f97abfa0e Change examples for Cyclades cards (c -> c0) to fit with reality. 1998-03-13 13:33:09 +00:00
Jordan K. Hubbard
115748d91d Allow rarpd to be started from rc.conf
PR:		5457
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
1998-03-09 08:50:30 +00:00
Brian Somers
71d854f63b Remove useless argument to ``. start_if.$ifn''
Pointed out by: Tim Tsai <tim@futuresouth.com>
1998-02-20 14:45:06 +00:00
Guido van Rooij
75e7ccb83d Add 2 new rc.conf variables:
forward_sourceroute : controls setting of existing net.inet.ip.sourceroute
accept_sourceroute : control setting of new net.inet.ip.accept_sourceroute
1998-02-16 19:21:32 +00:00
Alexander Langer
dbe11fd7dd Avoid using grep when determining ipfw's default policy -- it may not
be available at this stage of the boot if /usr is NFS mounted.
1998-02-14 04:12:23 +00:00
Alexander Langer
ad4463e18b Don't assume that IP services are disabled just because firewall_enable
is not set to YES in rc.conf.

Noticed by:	Mikael Karpberg <karpen@ocean.campus.luth.se>
1998-02-07 04:56:56 +00:00
Garrett Wollman
0da25c39b2 Add an additional `named_program' variable so that we can easily choose
between 4.9.6 and the port of 8.x.
1998-02-01 00:20:56 +00:00
Alexander Langer
e2fad09954 Compare return code from ipfw against 0 for success instead of == 1
for error.

Pointed out by:	Matthew Thyer <thyerm@camtech.net.au>
1998-01-10 03:33:39 +00:00
David E. O'Brien
75d1a35307 MF 22s 1997-12-01 06:11:34 +00:00
Sean Eric Fagan
5a583f9c34 Allow the system to be configured to pass "-n" to kerberos and
kadmind or not; also, only run kadmind on a non-slave server.  Man
page for rc.conf is also updated.

Reviewed by:	Mark Murray
1997-11-07 20:45:48 +00:00
Daniel O'Callaghan
24e24b0737 Fix some problems in the rules file loading and need for modload detection.
Found by: "James E. Housley" <housley@pr-comm.com>
1997-09-18 22:43:48 +00:00
Daniel O'Callaghan
5f4feab696 Reviewed by: msmith, alex
Cosmetic changes to the loading of firewall rules and lkm.
1997-09-11 10:59:02 +00:00
Paul Traina
0235182616 Merge from 2.2 (tcp extensions in phase 1) 1997-07-06 00:33:34 +00:00
Jordan K. Hubbard
919d435ace Neaten up some things which were inconsistent, add a few more flags
to things which need them, general cleanup.
Submitted by:	Brian Somers <brian@awfulhak.org>
1997-05-19 07:46:51 +00:00
Jordan K. Hubbard
f843ab9ce8 Add arp_proxyall knob.
Submitted by:	Christoph Kukulies <kuku@gilberto.physik.RWTH-Aachen.DE>
1997-05-13 08:22:27 +00:00
Jordan K. Hubbard
0862a4aff9 Update the etc world from RELENG_2_2 which is now more up-to-date
(gotta get myself -current again, this is a drag).

Also-fixes-problems-noted-by: Wolfgang Helbig & Joerg Wunsch
1997-05-03 11:22:17 +00:00
Jordan K. Hubbard
8141a0b639 Ack, learn to spell "extentions" the same way in the same file.
Also make the output a little less cryptic for sysctl settings.

Suggested by:	bde
1997-05-01 20:28:18 +00:00
Jordan K. Hubbard
b14caa899a YAMF22
PR:		3456
1997-05-01 20:04:42 +00:00
Jordan K. Hubbard
9381bc85a2 YAMF22 1997-05-01 04:38:16 +00:00
Jordan K. Hubbard
4a2d437732 YAMF22 1997-04-28 05:51:57 +00:00
Jordan K. Hubbard
524a1478c8 Bring in rc file changes from -current. 1997-04-27 03:59:19 +00:00
Bruce Evans
968ffc72fc Fixed the Cyclades and Digiboard port numbers. 1997-03-10 14:17:49 +00:00
Peter Wemm
79403fe300 Revert $FreeBSD$ to $Id$ 1997-02-23 09:21:14 +00:00
Jordan K. Hubbard
1130b656e5 Make the long-awaited change from $Id$ to $FreeBSD$
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore.  This update would have been
insane otherwise.
1997-01-14 07:20:47 +00:00
Nate Williams
6951277803 Minor modifications to the PCCARD startup files and comments.
Submitted by:	The Nomads
1997-01-06 06:26:01 +00:00
Nate Williams
d867405fbe Renamed the relevant PC-Card support files to reflect the newest release. 1996-03-14 18:24:07 +00:00
Bruce Evans
9c03f905b9 Added support for Cyclades and Digiboard devices.
Submitted by:	Daniel O'Callaghan <danny@lynx.its.unimelb.edu.au>
                + mods by bde
1996-02-24 19:51:25 +00:00
Mike Pritchard
440cac3e51 Another round of spelling fixes. 1996-01-31 15:03:18 +00:00
Rodney W. Grimes
1f55ebbcd9 This is a purely cosmetic clean up. Fix many cut and paste problems that
had turned tabs into spaces.
1995-04-09 09:54:51 +00:00
Andrey A. Chernov
b49d97b636 Add drainwait option examples 1995-01-05 00:11:52 +00:00
Andrey A. Chernov
fc306b1c16 cua*0? --> cua*a? 1994-12-04 23:54:39 +00:00
Andrey A. Chernov
b3108fb8a1 Now rc.serial used for initial setup of serial lines 1994-06-04 00:44:00 +00:00