Commit Graph

144 Commits

Author SHA1 Message Date
ume
1019384e31 - Don't try to send RA to lo0, gifN and faithN.
- ipv6_network_interfaces has all available interfaces to work for
  static configuration even if the host is end host.  When rtsol is
  invoked, singleness of interface is checked.
2001-01-25 13:18:26 +00:00
dougb
b8126f74e5 Fix this to be more consistent with similar constructions elsewhere 2001-01-14 09:29:57 +00:00
jhb
1bb19011b4 Move the syscons configuration to a machine independent rc.syscons. The
syscons sh code was identical on both platforms except for whitespace
differences.
2001-01-09 22:28:17 +00:00
dougb
ccc9a8e876 * Add an eval so that ipnat_flags=">/dev/null" works, per the PR
* Do some line length and specify full path cleanups while I'm here

PR:				conf/22937
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
2000-12-17 22:14:49 +00:00
dougb
1e8ecc617b Apply a more consistent style to the echo statements in /etc/ scripts.
* Put quotes around each line
* Single quotes for lines with no variable interpolation
* Double quotes if there is
* Capitalize each word that begins a line
* Make echo -n 'Doing foo:' ... echo '.' more of a standard

No functionality changes
2000-12-17 08:16:06 +00:00
ume
fe1bce1e67 Don't install route for fec0::/10. It was wrongly replaced from
ff02::/16 by me.

PR:		22715
2000-11-14 15:49:31 +00:00
ume
03e9a76a97 - ipv6_prefix_* and ipv6_ifconfig_* work for end node
- rtsol should be work for only one interface
- new variable ipv6_defaultrouter is added
- option name of rtadvd in comment are corrected
- ipv6_firewall_enable, ipv6_firewall_type, ipv6_firewall_script,
  ipv6_firewall_logging are added to introduce rc.firewall6.

IPv6 firewall rule is just starting point and should be brushed up.
This commit includes PR18621, PR21694, PR22051.

PR:		conf/18621, conf/21694, conf/22051
Reviewed by:	asmodai
2000-10-29 19:59:05 +00:00
ru
5cfbdcbbe8 Fixed the reporting of ip_portrange_{first|last}. 2000-10-12 11:25:57 +00:00
obrien
6700db6a71 Add copyright notices. Other systems have been barrowing our /etc files
w/o giving any credit.
2000-10-08 19:20:36 +00:00
darrenr
d021730618 This brings support for IP Filter into rc.network and rc.conf with
the appropriate documentation added to rc.conf(5).  If all goes well
with this over the next few weeks, the PR will be closed with the
pullup of patches back to 4-STABLE.

PR:		20202
Submitted by:	Gerhard Sittig <Gerhard.Sittig@gmx.net>
Reviewed by:	Darren Reed <darrenr@freebsd.org>
Approved by:	Darren Reed <darrenr@freebsd.org>
Obtained from:	Gerhard Sittig <Gerhard.Sittig@gmx.net>
2000-10-06 12:24:45 +00:00
brian
6605e8805b Use su -m instead of just su to avoid reading the users login profile 2000-09-28 05:43:44 +00:00
alex
40f66cd17b Print "Enable PC-card." before anything else is done with
PC-card stuff.  Also print a NEWLINE (!!) after that.

I'm driving mad each time when I see messages related to pccard before
"Enable PC-card." and particulary when I see
"Doing initial network setup". on the same line w/o a break.
2000-09-23 17:09:04 +00:00
ume
38e967c747 Make default interface work.
Obtained from:	KAME
2000-09-10 18:18:10 +00:00
nectar
748554442d Add nsswitch support. By creating an /etc/nsswitch.conf file, you can
configure FreeBSD so that various databases such as passwd and group can be
looked up using flat files, NIS, or Hesiod.

= Hesiod has been added to libc (see hesiod(3)).

= A library routine for parsing nsswitch.conf and invoking callback
  functions as specified has been added to libc (see nsdispatch(3)).

= The following C library functions have been modified to use nsdispatch:
    . getgrent, getgrnam, getgrgid
    . getpwent, getpwnam, getpwuid
    . getusershell
    . getaddrinfo
    . gethostbyname, gethostbyname2, gethostbyaddr
    . getnetbyname, getnetbyaddr
    . getipnodebyname, getipnodebyaddr, getnodebyname, getnodebyaddr

= host.conf has been removed from src/etc.  rc.network has been modified
  to warn that host.conf is no longer used at boot time.  In addition, if
  there is a host.conf but no nsswitch.conf, the latter is created at boot
  time from the former.

Obtained from:	NetBSD
2000-09-06 18:16:48 +00:00
ume
7d9cb18ab1 Avoid doing rtsol to psuedo interface.
PR:		bin/21062
2000-09-06 07:39:55 +00:00
jhb
ea3449bbd2 Fix a whitespace bogon. 2000-08-16 23:08:28 +00:00
brian
21c4f73753 Allow a ppp_user specification to run ppp at startup
PR:		20258
2000-08-10 00:13:02 +00:00
chris
ecf1cd2d1c Use shell matching instead of sed(1) to strip comments and blank lines.
Since it doesn't depend on anything in /usr, it should work with a NFS-mounted
/usr partition.

Thanks to Bruce Evans to bringing this to my attention.
2000-08-09 02:03:30 +00:00
ume
55b85b467a Fix an unmatched opening quote.
PR:		conf/20000
Submitted by:	Alex Kapranoff <alex@kapran.bitmcnit.bryansk.su>
2000-07-18 08:44:17 +00:00
nbm
863dc9acc4 Add to, don't overwrite, user-settable mountd_flags.
PR:		conf/15745
Submitted by:	Vivek Khera <khera@kciLink.com>
2000-07-14 13:03:36 +00:00
ume
20c9966da8 - Remove use of programs in /usr like sed as possible. In this
time, I have no idea if there is equivalence of printf.  So, stf
setup still depends on /usr.  In addition, prefix(8) and gifconfig(8)
are in /usr/sbin.  Should we move these into /sbin?

- Sync with latest stf behavior.  Latest stf doesn't have link-local
address.  And, latest stf is not gif but stf.
2000-07-09 20:12:50 +00:00
dillon
5d8a7de857 Add ip_portrange_first and ip_portrange_last rc.conf/rc.network
options.  This allows you to set the standard dynamic port
    assignment range prior to any network daemons (like named) starting
    up, necessary if you are also using a firewall to restrict lower ports.
    will be MFC'd in a few days
2000-06-22 17:40:53 +00:00
dillon
78844f7360 Add ipsec_enable and ipsec_file options to run IPSEC's setkey program
with the specified configuration file at the appropriate time.
2000-05-16 06:52:11 +00:00
kris
f0439cee66 Remove extraneous ";;" in previous commit
Submitted by:	jedgar
2000-05-15 19:56:59 +00:00
kris
866470d785 Create a DSA host key if one does not already exist, and teach sshd_config
about it.
2000-05-15 05:40:27 +00:00
ache
4a110a737f Add firewall_logging knob to enable/disablle events logging, disabled
by default. Needed mainly for ipfw kernel module to enable logging
disabled there.
2000-05-06 17:18:19 +00:00
sheldonh
e9b1278038 Add to defaults/rc.conf a new function source_rc_confs which rc
scripts may use to source safely overrides in ${rc_conf_files}
files.

This protects users who insist on the bad practice of copying
/etc/defaults/rc.conf to /etc/rc.conf from a recursive loop
that exhausts available file descriptors.

Several people have expressed interest in breaking this function
out into its own shell script.  Anyone who wants to embark on
such an undertaking would do well to study the attributed PR.

PR:		17595
Reported by:	adrian
Submitted by:	Doug Barton <Doug@gorean.org>
2000-04-27 08:43:49 +00:00
shin
1016927db1 Removed unnecessary comma in stf addr printf in hex format,
which I mysteriously added.

Submitted by: ume
2000-04-06 00:24:52 +00:00
shin
1ec21e179d Avoid using sed and awk in configure script.
TODO: also replace other sed and awk usages.

Submitted by: wollman
2000-03-28 17:46:02 +00:00
shin
ef2ad588bc Add a configuration options which enable/disable IPv4 mapped IPv6 addr
support.

Suggested and Reviewed by: ume
2000-03-28 17:39:53 +00:00
dillon
d7295a1a39 Add a sysctl to specify the amount of UDP receive space NFS should
reserve, in maximal NFS packets.  Originally only 2 packets worth of
    space was reserved.  The default is now 4, which appears to greatly
    improve performance for slow to mid-speed machines on gigabit networks.

    Add documentation and correct some prior documentation.

Problem Researched by: Andrew Gallatin <gallatin@cs.duke.edu>
Approved by: jkh
2000-03-27 21:38:35 +00:00
shin
75ef5ce6df IPv6 related configuration updates.
- 6to4(stf) interface configuration.
  - Static route configuration.
  - Comment additions.
  - Replaced a still existed '@' to '%' in IPv6 scoped addr format.
    (This became necessary as previous IPv6 scoped addr format change.)

Much thanks to ume, who helped me reviewing, testing, and finding problems
with these changes.

Approved by: jkh

Reviewed by: ume
2000-03-12 20:35:54 +00:00
shin
2e6d13f82a Prevent multicast packets from being sent over stf0 interface,
to avoid error messages printed on /var/log/messages.

  Recently added "stf" interface has IFF_MULTICAST bit set,
  because IPv6 don't work on non IFF_MULTICAST set interfaces
  in current implementation.
  But "stf" interface is multi-dest IPv6 over IPv4 tunnel, so
  can't treat multicast packet with no special configuration.

  On the other hand, tools like "rtadvd", "pim6dd", "pim6sd"
  send messages on IFF_MULTICAST set interfaces by default.
  So there will be many bogus error message on /var/log/messages,
  that multicast packets sent to "stf0" failed.

  So,

   -strip "stf0" from rtadvd sending interfaces in rc.network6
    ("rtadvd" is a daemon used only for local subnet, so it
     will never need to send its packets over "stf0" interfaces.)

   -Add default configuration files for "pim6dd" and "pim6sd",
    and disable "stf0" in those files.

Approved by: jkh
2000-03-11 20:10:39 +00:00
jkh
5258174fec cosmetic fix - add a space. 2000-02-29 12:53:28 +00:00
markm
d9108a4003 Get the order of things right; the keys need to be generated
early to allow entropy to replenish.
sshd must start late to catch the full effects of ldconfig.
2000-02-28 19:54:06 +00:00
jkh
e15679d81e Generate new sshd host key when necessary. I'm tired of
waiting for someone to commit this. :)
2000-02-28 19:21:05 +00:00
markm
1b942b3840 Run sshd at boot time if the sysadmin wants it. Also install
ssh[d] config files in the right place.
2000-02-24 23:12:04 +00:00
shin
1f38e33d22 -Remove IPv6 initialization failed interfaces from the list of
interfaces passed to rtadvd
-Comment out example sentences more completely
-Redirect error message of ifconfig output into /dev/null, to correctly
 find out working IPv6 interfaces

Approved by: jkh
2000-02-24 18:52:58 +00:00
shin
b171311de4 -Removed unnecessary use of awk.
-small comment fix.

Approved by: jkh

Submitted by:  Chris Costello <chris@calldei.com>
2000-02-24 06:51:03 +00:00
shin
af0bb08525 Add IPv6 configuration scripts.
Initial version created by, and kindly much tested by:
	bmah@CA.Sandia.GOV (Bruce A. Mah)

Approved by: jkh

Reviewed by: bmah@CA.Sandia.GOV (Bruce A. Mah),
	Ollivier Robert <roberto@keltia.freenix.fr>
Obtained from: KAME project
2000-02-23 18:05:58 +00:00
phk
afc2859d9d No arguments needed for fore_dnld any longer.
Approved by:	jkh
2000-02-15 13:21:43 +00:00
hm
104b16d9f8 Approved by: jkh
Reviewed by: joerg

The isdnd is able to listen on a socket for isdnmonitor to connect to
it to remotely control it (similar to ppp and pppctl). When this is
enabled in the isdnd config file, it will fail currently because isdnd
is started before the network interfaces are configured.
It is necessary to move the isdnd start after the ifconfig of the network
interfaces, then this problem will not occur.
2000-02-06 16:33:54 +00:00
chris
29fd6b6840 Add and document support for handling comments and blank lines
in /etc/sysctl.conf.

Reviewed by:	imp, jkh
2000-01-16 18:12:42 +00:00
green
89bb6f8da7 This is another in Martin Blapp's N-series of mount-related cleanups :)
Changes are:
 - rpc.umntall is called at the right places now in /etc/rc*
 - rpc.umntall timeout has been lowered from two days (too high) to one
 - verbose messages in rpc.umntall have been clarified
 - kill double entries in /var/db/mounttab when rpc.umntall is invoked
 - ${early_nfs_mounts} has been removed from /etc/rc
 - patched mount(8) -p to print different pass/dump values for ufs filesystems.
   (last patch recieved from dan <bugg@bugg.strangled.net>)

Submitted by:	Martin Blapp <mbr@imp.ch>, dan <bugg@bugg.strangled.net>
2000-01-15 14:28:14 +00:00
luigi
a924d4cf00 Cleanup diskless support in current, mostly aligning it to the one
in the 3.x branch. Also remove the dependency on /usr to find the
boot address/interface.
Mostly-submitted-abd-tested-by: MIHIRA Sanpei Yoshiro <sanpei@sanpei.org>
2000-01-06 18:17:38 +00:00
roberto
60667129be xntpd -> ntpd.
Submitted by:	ru
1999-12-17 13:36:40 +00:00
obrien
e19cc0dd4f Suport multiple ``ifconfig_*?="DHCP"'' configurations.
Currently we have a problem in that `dhclient' bails when configuring the
second interface as port 68 is already in use (by the `dhclient' started
for the first interface).

PR:		14810
Submitted by:	n_hibma
1999-12-12 01:58:30 +00:00
imp
61ef46db68 Now that pccardc beep actually works, add knob for it in rc.conf/rc.pccard
Submitted by: sanpei@sanpei.org (MIHIRA-san Yoshiro)
1999-12-02 19:48:16 +00:00
brian
53db874398 Oops, typo 1999-11-23 00:26:03 +00:00
brian
24f5678bfc Add pppoed startup options 1999-11-23 00:22:25 +00:00