Commit Graph

164 Commits

Author SHA1 Message Date
brian
4f17385195 Add clear_daily_* variables 2000-06-09 17:07:15 +00:00
wilko
58e3e4be42 Add suggested comment for TCP_DROP_SYNFIN and TCP_RESTRICT_RST
PR:		conf/18124
Submitted by:	Matt Heckaman <matt@arpa.mail.net>
2000-05-27 18:03:15 +00:00
wollman
3836de47f4 Fix misleading comment. 2000-05-18 19:02:47 +00:00
dillon
78844f7360 Add ipsec_enable and ipsec_file options to run IPSEC's setkey program
with the specified configuration file at the appropriate time.
2000-05-16 06:52:11 +00:00
ache
4a110a737f Add firewall_logging knob to enable/disablle events logging, disabled
by default. Needed mainly for ipfw kernel module to enable logging
disabled there.
2000-05-06 17:18:19 +00:00
sheldonh
e9b1278038 Add to defaults/rc.conf a new function source_rc_confs which rc
scripts may use to source safely overrides in ${rc_conf_files}
files.

This protects users who insist on the bad practice of copying
/etc/defaults/rc.conf to /etc/rc.conf from a recursive loop
that exhausts available file descriptors.

Several people have expressed interest in breaking this function
out into its own shell script.  Anyone who wants to embark on
such an undertaking would do well to study the attributed PR.

PR:		17595
Reported by:	adrian
Submitted by:	Doug Barton <Doug@gorean.org>
2000-04-27 08:43:49 +00:00
iwasaki
6c940a99c2 Enable etc/defaults/pccard.conf which is default configuration file
for pccardd.
Please install /etc/defaults/pccard.conf and update /etc/defaults/rc.conf
as well.
Note that old pccard.conf.sample still remains for while but
no longer to be maintained.

Reviewed by:	imp, -mobile ML and nomads ML in Japan.
2000-04-03 19:24:25 +00:00
shin
c3f9e80fdc Fix english.
Specified by: sheldonh
2000-03-29 15:03:28 +00:00
shin
ef2ad588bc Add a configuration options which enable/disable IPv4 mapped IPv6 addr
support.

Suggested and Reviewed by: ume
2000-03-28 17:39:53 +00:00
dillon
d7295a1a39 Add a sysctl to specify the amount of UDP receive space NFS should
reserve, in maximal NFS packets.  Originally only 2 packets worth of
    space was reserved.  The default is now 4, which appears to greatly
    improve performance for slow to mid-speed machines on gigabit networks.

    Add documentation and correct some prior documentation.

Problem Researched by: Andrew Gallatin <gallatin@cs.duke.edu>
Approved by: jkh
2000-03-27 21:38:35 +00:00
billf
042cd9478f Make syslogd boot -s by default, which prevents Bad People from filling up
your diskspace.

PR:		conf/15737
Submitted by:	Kevin Day <toasty@dragondata.com> (PR)
		Nick Johnson <freebsd@spatula.net> (on -current)
2000-03-20 19:53:56 +00:00
shin
75ef5ce6df IPv6 related configuration updates.
- 6to4(stf) interface configuration.
  - Static route configuration.
  - Comment additions.
  - Replaced a still existed '@' to '%' in IPv6 scoped addr format.
    (This became necessary as previous IPv6 scoped addr format change.)

Much thanks to ume, who helped me reviewing, testing, and finding problems
with these changes.

Approved by: jkh

Reviewed by: ume
2000-03-12 20:35:54 +00:00
shin
2495f8bf23 Change default of rtadvd to "YES".
Also add IPv6 example for "ifconfig_ifname_alias".

Suggested by: bmah@CA.Sandia.GOV
2000-03-09 15:19:58 +00:00
markm
27fe751781 Add userland tweakables for OpenSSH and OpenSSL. 2000-02-24 23:08:19 +00:00
shin
af0bb08525 Add IPv6 configuration scripts.
Initial version created by, and kindly much tested by:
	bmah@CA.Sandia.GOV (Bruce A. Mah)

Approved by: jkh

Reviewed by: bmah@CA.Sandia.GOV (Bruce A. Mah),
	Ollivier Robert <roberto@keltia.freenix.fr>
Obtained from: KAME project
2000-02-23 18:05:58 +00:00
jkh
009cea468d PS/2 mice are a lot more common than serial mice now; use /dev/psm0
as default rather than /dev/cuaa0
2000-02-19 13:07:21 +00:00
paul
1526ff49b0 Add a firewall_flags option that is used when ipfw processes a file. It allows
you to run a preprocessor, such as m4, so that you can use macros in your
rules file.

Approved by:	jkh
2000-02-06 19:25:00 +00:00
sheldonh
e19228dc56 Add an explicit warning against copying this file into /etc/, since
work-arounds for the ".: Out of file descriptors" problem (see
PR 13724) are taking longer than expected to come to fruition.
1999-12-21 10:46:41 +00:00
roberto
7f5f260b45 Bye bye xntpd, enter ntp.
The variable names haven't changed for compapatibility reasons.
1999-12-16 12:45:40 +00:00
gallatin
22dd32c01d Add an enable_osf1 knob to the alpha startup code 1999-12-15 14:27:59 +00:00
imp
61ef46db68 Now that pccardc beep actually works, add knob for it in rc.conf/rc.pccard
Submitted by: sanpei@sanpei.org (MIHIRA-san Yoshiro)
1999-12-02 19:48:16 +00:00
alfred
610bf05839 we all like to 'Use' ppp, but this should be 'User'
Pointed out by: dcs
1999-11-24 10:44:47 +00:00
ache
32e24001e6 Remove man_locales - goes to manpath.config 1999-11-23 03:24:20 +00:00
brian
24f5678bfc Add pppoed startup options 1999-11-23 00:22:25 +00:00
ache
13f6adacd5 Add single_mountd_enable hook to run mountd but not NFS server
Needed for machine with CFS but without real NFS
1999-11-14 21:28:13 +00:00
obrien
a968f654a9 Remove "-k" (kernel-arch) as "i386" is not appropriate on the Alpha.
Also remove the "-d" domain option, as if someone is savey enough to want
this, they are savey enought to make a custom amd_flags in /etc/rc.conf.
1999-10-16 05:42:50 +00:00
billf
b6956e3e3c If dumpdev exists, it's automatically enabled. Change comment to reflect. 1999-10-01 00:13:44 +00:00
jkoshy
13f995da9e Remove the "vinum_drives" rc.conf knob. According to Greg <grog@lemis.com>
this is no longer the right way to start Vinum unless you are doing some
kind of maintenance, and that's not the sort of thing that would go into
rc.conf.
1999-09-22 06:31:32 +00:00
obrien
452637dcc0 /emulation/binary compatibility/ 1999-09-15 02:25:13 +00:00
des
ad7d5e0e01 Fix disordering introduced in my previous commit.
Pointed out by:	bde
1999-09-13 09:45:07 +00:00
des
19e7731a48 Add the net.inet.tcp.restrict_rst and net.inet.tcp.drop_synfin sysctl
variables, conditional on the TCP_RESTRICT_RST and TCP_DROP_SYNFIN kernel
options, respectively. See the comments in LINT for details.
1999-09-12 17:22:08 +00:00
ache
a59fb2667c Add man_locales knob to specify localized man subdirs for makewhatis and
catman
1999-09-11 19:00:41 +00:00
cpiazza
bd6cdbc443 set check_quotas="YES" as the default.
PR:		13603
Submitted by:	Alex Perel <veers@distributed.net>
Reviewed by:	billf
1999-09-06 20:22:40 +00:00
peter
289c0d262f $Id$ -> $FreeBSD$ 1999-08-27 23:37:10 +00:00
brian
731a1c9a39 ppp_alias -> ppp_nat
Submitted by: Josef L. Karthauser <joe@FreeBSD.org.uk>
1999-08-22 23:26:05 +00:00
obrien
ac3a4d6b97 s/Yes/YES/g. `tcp_extensions''s comment implied "Yes" was a valid value
for turning on the feature.  Which is wrong.

Submitted by:	bde
1999-08-14 17:15:19 +00:00
obrien
61f4e46c6b Hopefully clarify "log_in_vain" knob's comment.
Reviewed by:	bde, sheldonh, andreas
1999-08-14 17:13:40 +00:00
obrien
0fd5df0f13 Use proper capitalization. 1999-08-14 03:42:27 +00:00
obrien
a6481ae094 Use better comment for tcp_keepalive option.
Submitted by:	imp
1999-08-14 03:41:56 +00:00
des
25571d959a Add net.inet.icmp.log_redirect and net.inet.icmp.drop_redirect, for
respectively logging and dropping ICMP REDIRECT packets.

Note that there is no rate limiting on the log messages, so log_redirect
should be used with caution (preferrably only for debugging purposes).
1999-08-10 09:45:33 +00:00
eivind
eb88bd01b5 Better comment on ntpdate_enable - if I have misunderstood when
ntpdate was run (I thought it was cron'ed), other people probably do
too.
1999-08-03 10:11:02 +00:00
brian
03ab8a3b7f Add a default ppp.conf (mode 600).
Originally submitted by: Wayne Self <wself@cdrom.com>

Allow a ppp startup option in rc.conf.

Adjust sysinstall so that it appends to the end of ppp.conf
and uses the generated profile to start ppp in auto mode on
boot.

Submitted by: Josef L. Karthauser <joe@uk.FreeBSD.org>
1999-07-26 10:49:37 +00:00
jkh
47d2323c99 Use a less annoying default hostname. 1999-07-18 09:58:01 +00:00
jkh
62a15a73f5 Allow DHCP to be used in an ifconfig variable instead of the usual
address information, producing the obvious effect (dhcp configuration).

Submitted by:   "Sean O'Connell" <sean@stat.Duke.EDU>
1999-07-16 09:26:53 +00:00
iwasaki
4e7cdaf3e8 Refine on explanation for apm stuff.
Make it clear that apmd  depends on apmconf -e.

Reviewed by:	obrien, my friend :-)
1999-07-12 17:20:29 +00:00
iwasaki
f687757a7c Add apmd_enable and apmd_flags for the boot-time optinos.
Pointed out by:	obrien
Forgotten by:	iwasaki
1999-07-11 04:05:45 +00:00
sheldonh
37c066a7ad Allow internal and external wrapping to be enabled independantly of
each other. Instead of allowing the -w option to be specified twice,
we now take -w (wrap external) and -W (wrap internal).

Discussed with:	markm
1999-07-09 11:19:01 +00:00
peter
b972643acb Tweak previous commit. Only sense the configuration if network_interfaces
is set to "auto".  Any network_interfaces settings will be treated as
before.
1999-07-08 18:56:04 +00:00
peter
cc2ae796a6 Do away with ${network_interfaces} in rc.conf. Just use ifconfig -l to
get a list of interfaces, and then automatically configure them if
${ifconfig_${ifn}} or /etc/start_if.${ifn} exists.

This makes it a lot easier to deal with machines that constantly change
their network configuration as you can leave ifconfig settings for all
the possible cards - just the ones that are present will be configured.
1999-07-07 12:49:47 +00:00
hosokawa
d7975be538 Added pccard_conf parameter to /etc/rc.conf,
and set it to "/etc/pccard.conf.sample" in /etc/defaults/rc.conf.
Perhaps this default value can be inappropriate,
but I set to this value for the convenience of PC-card boot.flp users.
Please correct it if there are better solutions.
1999-07-07 01:19:15 +00:00
hosokawa
e643ff4664 Added "pccardd_flags" for rc.conf. 1999-07-04 14:41:20 +00:00
obrien
8447bc90a5 Amd now mounts to "/.amd_mnt" rather than "/net". "/net/<host>" now works
in addition to "/host/<host>".  This make us consistant with Sun (as we
already were with SGI).
1999-06-28 04:09:14 +00:00
jseger
adb097eb8e Standardize appearance of subsection headers (two spaces for section name) 1999-06-27 22:12:35 +00:00
sheldonh
31aade9ad1 Add command-line option (-w), specified once to enable wrapping and
twice to enable wrapping for internal wrapping as well. If the option is
not specified wrapping is turned off so that inetd will behave exactly
as it used to before TCP Wrappers was imported.

Change etc/defaults/rc.conf so as to encourage wrapping on new systems.

Clarify the use of TCP Wrappers in the IMPLEMENTATION NOTES of the
manual page.

Approved by:	jkh
1999-06-27 18:05:34 +00:00
phk
47e8c0df80 Add handle to control global TCP keepalives and turn them on as
default.

Despite their name it doesn't keep TCP sessions alive, it kills
them if the other end has gone AWOL.  This happens a lot with
clients which use NAT, dynamic IP assignment or which has a 2^32
* 10^-3 seconds upper bound on their uptime.

There is no detectable increase in network trafic because of this:
two minimal TCP packets every two hours for a live TCP connection.

Many servers already enable keepalives themselves.

The host requirements RFC is 10 years old, and doesn't know about
the loosing clients of todays InterNet.
1999-06-05 05:45:57 +00:00
phk
3dc9bdca32 Change tcp_extension comment.
Submitted by:	Studded <Studded@gorean.org>
Reviewed by:	phk
1999-05-16 09:19:44 +00:00
des
0a96c9181d Allow the user to specify a different firewall script than /etc/rc.firewall. 1999-04-10 10:56:58 +00:00
grog
1e7868a058 Add variable start_vinum. If set to YES, it will start vinum and
automagically find all the partitions.  This is to be preferred to the
somewhat emetic usage of vinum_slices and the equally obnoxious 'vinum
read' command.
1999-04-02 07:15:44 +00:00
imp
cef8c01351 Add two features:
log_in_vain:
	log_in_vain turns on logging for packets to ports for which
	there is no listener.
    rc.sysctl:
	A generic way to set sysctl values.  It reads /etc/syslog.conf
	and sets values based on that.  No /etc/syslog.conf has been
	checked in yet, and I've not added this to the makefile yet
	until I get more feedback.

Reviewed by: -current, -hackers and bde especially
1999-03-28 20:36:03 +00:00
brian
2a47068aac Add natd_program and change a comment. 1999-03-24 10:27:46 +00:00
billf
544adda3ec Split check_quotas into check_quotas and enable_quotas
enable_quotas - use quotas on your system
check_quotas - check for violations on startup

By assuming that a system was neat and without violation before it booted
we can skip a long (and at that point needless) process.

Submitted by:	Alex Perel <veers@disturbed.net>
1999-03-17 04:00:04 +00:00
jfitz
1a5c7969f4 Add ${lpd_program} and ${portmap_program} as variables in rc.conf, with
suitable defaults pointing to the FreeBSD-shipped versions.  This will allow
for easier integration of third-party replacements for these daemons.
Reviewed by: Several members of -committers
1999-03-11 16:17:24 +00:00
phk
118df06bdc Change the comment to sendmail_flags which has scared so many people
from removing -bd to something more sensible.
1999-03-03 15:04:33 +00:00
jkh
fb9f9eb881 Move rc.conf into defaults/ directory. This is part of a larger series
of commits to deal with the rc.conf.site confusion.
1999-02-09 22:15:18 +00:00