diff --git a/etc/Makefile b/etc/Makefile
index ee8b2dd6ee56..5ed2414a0d4c 100644
--- a/etc/Makefile
+++ b/etc/Makefile
@@ -17,7 +17,6 @@ SUBDIR+=sendmail
 BIN1=	\
 	login.access \
 	rc.bsdextended \
-	rc.firewall \
 	termcap.small
 
 # NB: keep these sorted by MK_* knobs
diff --git a/libexec/rc/Makefile b/libexec/rc/Makefile
index 2e28f86153fb..c3af2fd62325 100644
--- a/libexec/rc/Makefile
+++ b/libexec/rc/Makefile
@@ -1,8 +1,13 @@
 # $FreeBSD$
 
+.include <src.opts.mk>
+
 CONFGROUPS=	CONFETC CONFETCEXEC CONFETCDEFAULTS
 CONFETCDIR=	/etc
 CONFETC=	network.subr rc rc.initdiskless rc.subr rc.shutdown
+.if ${MK_IPFW} != "no"
+CONFETC+=	rc.firewall
+.endif
 CONFETCMODE=	644
 CONFETCEXEC=	netstart pccard_ether rc.resume rc.suspend
 CONFETCEXECDIR=	/etc