Commit Graph

69 Commits

Author SHA1 Message Date
markm
968e0bbd12 Add entropy caching. With this, some entropy is cached at shutdown
time, and this is used to reseed the random number generator at
boot time.

NOTE - this has no hope of working if you halt(); you need to
execute rc.shutdown to get the entropy stash.
2000-07-17 12:28:58 +00:00
markm
06c84cc174 Clean up all the old setup code for the old /dev/random. This will be
revisited when the new /dev/random is done.
2000-06-25 10:55:23 +00:00
brian
567e3fdcca Introduce /etc/defaults/periodic.conf, similar in concept to rc.conf.
The only change in the default functionality should be that
the output reports are slightly more verbose WRT files deleted.

Not objected to by: freebsd-arch
2000-06-23 01:18:31 +00:00
dillon
5d8a7de857 Add ip_portrange_first and ip_portrange_last rc.conf/rc.network
options.  This allows you to set the standard dynamic port
    assignment range prior to any network daemons (like named) starting
    up, necessary if you are also using a firewall to restrict lower ports.
    will be MFC'd in a few days
2000-06-22 17:40:53 +00:00
brian
041e66b304 Don't include /compat/linux/tmp in $clean_daily_dirs as it's usually
a link to /tmp

Pointed out by: des
2000-06-20 14:58:48 +00:00
brian
4f17385195 Add clear_daily_* variables 2000-06-09 17:07:15 +00:00
wilko
58e3e4be42 Add suggested comment for TCP_DROP_SYNFIN and TCP_RESTRICT_RST
PR:		conf/18124
Submitted by:	Matt Heckaman <matt@arpa.mail.net>
2000-05-27 18:03:15 +00:00
wollman
3836de47f4 Fix misleading comment. 2000-05-18 19:02:47 +00:00
dillon
78844f7360 Add ipsec_enable and ipsec_file options to run IPSEC's setkey program
with the specified configuration file at the appropriate time.
2000-05-16 06:52:11 +00:00
ache
4a110a737f Add firewall_logging knob to enable/disablle events logging, disabled
by default. Needed mainly for ipfw kernel module to enable logging
disabled there.
2000-05-06 17:18:19 +00:00
sheldonh
e9b1278038 Add to defaults/rc.conf a new function source_rc_confs which rc
scripts may use to source safely overrides in ${rc_conf_files}
files.

This protects users who insist on the bad practice of copying
/etc/defaults/rc.conf to /etc/rc.conf from a recursive loop
that exhausts available file descriptors.

Several people have expressed interest in breaking this function
out into its own shell script.  Anyone who wants to embark on
such an undertaking would do well to study the attributed PR.

PR:		17595
Reported by:	adrian
Submitted by:	Doug Barton <Doug@gorean.org>
2000-04-27 08:43:49 +00:00
iwasaki
6c940a99c2 Enable etc/defaults/pccard.conf which is default configuration file
for pccardd.
Please install /etc/defaults/pccard.conf and update /etc/defaults/rc.conf
as well.
Note that old pccard.conf.sample still remains for while but
no longer to be maintained.

Reviewed by:	imp, -mobile ML and nomads ML in Japan.
2000-04-03 19:24:25 +00:00
shin
c3f9e80fdc Fix english.
Specified by: sheldonh
2000-03-29 15:03:28 +00:00
shin
ef2ad588bc Add a configuration options which enable/disable IPv4 mapped IPv6 addr
support.

Suggested and Reviewed by: ume
2000-03-28 17:39:53 +00:00
dillon
d7295a1a39 Add a sysctl to specify the amount of UDP receive space NFS should
reserve, in maximal NFS packets.  Originally only 2 packets worth of
    space was reserved.  The default is now 4, which appears to greatly
    improve performance for slow to mid-speed machines on gigabit networks.

    Add documentation and correct some prior documentation.

Problem Researched by: Andrew Gallatin <gallatin@cs.duke.edu>
Approved by: jkh
2000-03-27 21:38:35 +00:00
billf
042cd9478f Make syslogd boot -s by default, which prevents Bad People from filling up
your diskspace.

PR:		conf/15737
Submitted by:	Kevin Day <toasty@dragondata.com> (PR)
		Nick Johnson <freebsd@spatula.net> (on -current)
2000-03-20 19:53:56 +00:00
shin
75ef5ce6df IPv6 related configuration updates.
- 6to4(stf) interface configuration.
  - Static route configuration.
  - Comment additions.
  - Replaced a still existed '@' to '%' in IPv6 scoped addr format.
    (This became necessary as previous IPv6 scoped addr format change.)

Much thanks to ume, who helped me reviewing, testing, and finding problems
with these changes.

Approved by: jkh

Reviewed by: ume
2000-03-12 20:35:54 +00:00
shin
2495f8bf23 Change default of rtadvd to "YES".
Also add IPv6 example for "ifconfig_ifname_alias".

Suggested by: bmah@CA.Sandia.GOV
2000-03-09 15:19:58 +00:00
markm
27fe751781 Add userland tweakables for OpenSSH and OpenSSL. 2000-02-24 23:08:19 +00:00
shin
af0bb08525 Add IPv6 configuration scripts.
Initial version created by, and kindly much tested by:
	bmah@CA.Sandia.GOV (Bruce A. Mah)

Approved by: jkh

Reviewed by: bmah@CA.Sandia.GOV (Bruce A. Mah),
	Ollivier Robert <roberto@keltia.freenix.fr>
Obtained from: KAME project
2000-02-23 18:05:58 +00:00
jkh
009cea468d PS/2 mice are a lot more common than serial mice now; use /dev/psm0
as default rather than /dev/cuaa0
2000-02-19 13:07:21 +00:00
paul
1526ff49b0 Add a firewall_flags option that is used when ipfw processes a file. It allows
you to run a preprocessor, such as m4, so that you can use macros in your
rules file.

Approved by:	jkh
2000-02-06 19:25:00 +00:00
sheldonh
e19228dc56 Add an explicit warning against copying this file into /etc/, since
work-arounds for the ".: Out of file descriptors" problem (see
PR 13724) are taking longer than expected to come to fruition.
1999-12-21 10:46:41 +00:00
roberto
7f5f260b45 Bye bye xntpd, enter ntp.
The variable names haven't changed for compapatibility reasons.
1999-12-16 12:45:40 +00:00
gallatin
22dd32c01d Add an enable_osf1 knob to the alpha startup code 1999-12-15 14:27:59 +00:00
imp
61ef46db68 Now that pccardc beep actually works, add knob for it in rc.conf/rc.pccard
Submitted by: sanpei@sanpei.org (MIHIRA-san Yoshiro)
1999-12-02 19:48:16 +00:00
alfred
610bf05839 we all like to 'Use' ppp, but this should be 'User'
Pointed out by: dcs
1999-11-24 10:44:47 +00:00
ache
32e24001e6 Remove man_locales - goes to manpath.config 1999-11-23 03:24:20 +00:00
brian
24f5678bfc Add pppoed startup options 1999-11-23 00:22:25 +00:00
ache
13f6adacd5 Add single_mountd_enable hook to run mountd but not NFS server
Needed for machine with CFS but without real NFS
1999-11-14 21:28:13 +00:00
obrien
a968f654a9 Remove "-k" (kernel-arch) as "i386" is not appropriate on the Alpha.
Also remove the "-d" domain option, as if someone is savey enough to want
this, they are savey enought to make a custom amd_flags in /etc/rc.conf.
1999-10-16 05:42:50 +00:00
billf
b6956e3e3c If dumpdev exists, it's automatically enabled. Change comment to reflect. 1999-10-01 00:13:44 +00:00
jkoshy
13f995da9e Remove the "vinum_drives" rc.conf knob. According to Greg <grog@lemis.com>
this is no longer the right way to start Vinum unless you are doing some
kind of maintenance, and that's not the sort of thing that would go into
rc.conf.
1999-09-22 06:31:32 +00:00
obrien
452637dcc0 /emulation/binary compatibility/ 1999-09-15 02:25:13 +00:00
des
ad7d5e0e01 Fix disordering introduced in my previous commit.
Pointed out by:	bde
1999-09-13 09:45:07 +00:00
des
19e7731a48 Add the net.inet.tcp.restrict_rst and net.inet.tcp.drop_synfin sysctl
variables, conditional on the TCP_RESTRICT_RST and TCP_DROP_SYNFIN kernel
options, respectively. See the comments in LINT for details.
1999-09-12 17:22:08 +00:00
ache
a59fb2667c Add man_locales knob to specify localized man subdirs for makewhatis and
catman
1999-09-11 19:00:41 +00:00
cpiazza
bd6cdbc443 set check_quotas="YES" as the default.
PR:		13603
Submitted by:	Alex Perel <veers@distributed.net>
Reviewed by:	billf
1999-09-06 20:22:40 +00:00
peter
289c0d262f $Id$ -> $FreeBSD$ 1999-08-27 23:37:10 +00:00
brian
731a1c9a39 ppp_alias -> ppp_nat
Submitted by: Josef L. Karthauser <joe@FreeBSD.org.uk>
1999-08-22 23:26:05 +00:00
obrien
ac3a4d6b97 s/Yes/YES/g. `tcp_extensions''s comment implied "Yes" was a valid value
for turning on the feature.  Which is wrong.

Submitted by:	bde
1999-08-14 17:15:19 +00:00
obrien
61f4e46c6b Hopefully clarify "log_in_vain" knob's comment.
Reviewed by:	bde, sheldonh, andreas
1999-08-14 17:13:40 +00:00
obrien
0fd5df0f13 Use proper capitalization. 1999-08-14 03:42:27 +00:00
obrien
a6481ae094 Use better comment for tcp_keepalive option.
Submitted by:	imp
1999-08-14 03:41:56 +00:00
des
25571d959a Add net.inet.icmp.log_redirect and net.inet.icmp.drop_redirect, for
respectively logging and dropping ICMP REDIRECT packets.

Note that there is no rate limiting on the log messages, so log_redirect
should be used with caution (preferrably only for debugging purposes).
1999-08-10 09:45:33 +00:00
eivind
eb88bd01b5 Better comment on ntpdate_enable - if I have misunderstood when
ntpdate was run (I thought it was cron'ed), other people probably do
too.
1999-08-03 10:11:02 +00:00
brian
03ab8a3b7f Add a default ppp.conf (mode 600).
Originally submitted by: Wayne Self <wself@cdrom.com>

Allow a ppp startup option in rc.conf.

Adjust sysinstall so that it appends to the end of ppp.conf
and uses the generated profile to start ppp in auto mode on
boot.

Submitted by: Josef L. Karthauser <joe@uk.FreeBSD.org>
1999-07-26 10:49:37 +00:00
jkh
47d2323c99 Use a less annoying default hostname. 1999-07-18 09:58:01 +00:00
jkh
62a15a73f5 Allow DHCP to be used in an ifconfig variable instead of the usual
address information, producing the obvious effect (dhcp configuration).

Submitted by:   "Sean O'Connell" <sean@stat.Duke.EDU>
1999-07-16 09:26:53 +00:00
iwasaki
4e7cdaf3e8 Refine on explanation for apm stuff.
Make it clear that apmd  depends on apmconf -e.

Reviewed by:	obrien, my friend :-)
1999-07-12 17:20:29 +00:00