Commit Graph

30 Commits

Author SHA1 Message Date
jkoshy
ed7cc86037 Turn off replies to ICMP echo requests for broadcast and multicast
addresses by default.

Add a knob "icmp_bmcastecho" to "rc.network" to allow this
behaviour to be controlled from "rc.conf".

Document the controlling sysctl variable "net.inet.icmp.bmcastecho"
in sysctl(3).

Reviewed by: dg, jkh
Reminded on -hackers by: Steinar Haug <sthaug@nethelp.no>
1998-09-15 10:49:03 +00:00
phk
50b8aa03a9 tcp_extensions now only applies to RFC1323 1998-09-06 08:20:11 +00:00
phk
dccdd3ccd1 In /etc/rc.network, near line 242, setting up Kerberos,
variable "stash_flag" is set.  A few lines later, it is evaluated
as "stash_flags" with a trailing "s", and then a bit later the
singular version is unset.

PR:		7609
Reviewed by:	phk
Submitted by:	Walt Howard <howard@ee.utah.edu>
1998-08-14 06:55:17 +00:00
nectar
05d7faa963 Allow either an IP address or an interface to be specified in
the rc.conf variable ``natd_interface''.  rc.network will
determine whether it is an IP address or an interface name,
and invoke natd with the -a or -n flag as appropriate.

PR:				6947
Reviewed by:	jkh@FreeBSD.ORG
1998-07-08 15:40:53 +00:00
steve
48e1128e9d Cleanup natd startup test.
PR:		6946
Submitted by:	Jacques Vidrine <n@nectar.com>
1998-06-14 16:31:03 +00:00
jkh
f99594a8c3 cosmetic: clean up startup messages and rearrange some options
to go in a more proper order.
1998-05-19 04:36:31 +00:00
andreas
e10a5f74a6 Overlooked, that newer naming convention is xxx_program instead of xxx_prog.
So changed it to ntpdate_program and xntpd_program.
Backout last change, now we have again named_program, sorry.
1998-05-06 17:36:16 +00:00
andreas
b01afb1a08 Add variables for the ntpdate and xntpd program, you might want
to run the binaries from the new ntp v4 port.
1998-05-05 21:14:27 +00:00
phk
de32d1b338 Jean-Simon Pendry's paper on amd refers to the use of "ypcat -k"
against the "master map" to get the list of mount point/amd map
correspondences, and using that list as command-line arguments to start
amd.

When I tried to do this with the existing /etc/rc* scripts, I found that
I couldn't do this by modifying only /etc/rc.conf:  that file gets
sourced very early by /etc/rc, well before any networking functionality
is present, let alone NIS.  Further, I wasn't able to figure out a way
to use various levels & types of quoting to defer evaluation of the
string to a point subsequent to NIS initialization.

As a result, I resorted to hacking /etc/rc.network -- but I did it in a
way that ought to be reasonably general, and avoid breakage for anyone
else.

PR:		6387
Reviewed by:	phk
Submitted by:	David Wolfskill <dhw@whistle.com>
1998-04-26 06:32:13 +00:00
brian
116081d5f2 Add natd support.
PR:		6339
Submitted by:	cdillon@wolves.k12.mo.us
1998-04-18 10:27:19 +00:00
markm
88d6397093 Enable the SecureRPC bits in rc.conf, if the Administrator wants them. 1998-04-12 09:47:43 +00:00
jkh
bf9a648a9b Allow rarpd to be started from rc.conf
PR:		5457
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
1998-03-09 08:50:30 +00:00
brian
897caf0c18 Remove useless argument to ``. start_if.$ifn''
Pointed out by: Tim Tsai <tim@futuresouth.com>
1998-02-20 14:45:06 +00:00
guido
620810fd0c Add 2 new rc.conf variables:
forward_sourceroute : controls setting of existing net.inet.ip.sourceroute
accept_sourceroute : control setting of new net.inet.ip.accept_sourceroute
1998-02-16 19:21:32 +00:00
alex
e01140a727 Avoid using grep when determining ipfw's default policy -- it may not
be available at this stage of the boot if /usr is NFS mounted.
1998-02-14 04:12:23 +00:00
alex
b888dc7998 Don't assume that IP services are disabled just because firewall_enable
is not set to YES in rc.conf.

Noticed by:	Mikael Karpberg <karpen@ocean.campus.luth.se>
1998-02-07 04:56:56 +00:00
wollman
2a227e2801 Add an additional `named_program' variable so that we can easily choose
between 4.9.6 and the port of 8.x.
1998-02-01 00:20:56 +00:00
alex
4881b1e50e Compare return code from ipfw against 0 for success instead of == 1
for error.

Pointed out by:	Matthew Thyer <thyerm@camtech.net.au>
1998-01-10 03:33:39 +00:00
obrien
4d9672d387 MF 22s 1997-12-01 06:11:34 +00:00
sef
5cb2a472c9 Allow the system to be configured to pass "-n" to kerberos and
kadmind or not; also, only run kadmind on a non-slave server.  Man
page for rc.conf is also updated.

Reviewed by:	Mark Murray
1997-11-07 20:45:48 +00:00
danny
df61c66b40 Fix some problems in the rules file loading and need for modload detection.
Found by: "James E. Housley" <housley@pr-comm.com>
1997-09-18 22:43:48 +00:00
danny
347e2e3c36 Reviewed by: msmith, alex
Cosmetic changes to the loading of firewall rules and lkm.
1997-09-11 10:59:02 +00:00
pst
e052207ec2 Merge from 2.2 (tcp extensions in phase 1) 1997-07-06 00:33:34 +00:00
jkh
eca8c2300f Neaten up some things which were inconsistent, add a few more flags
to things which need them, general cleanup.
Submitted by:	Brian Somers <brian@awfulhak.org>
1997-05-19 07:46:51 +00:00
jkh
f90d31ab70 Add arp_proxyall knob.
Submitted by:	Christoph Kukulies <kuku@gilberto.physik.RWTH-Aachen.DE>
1997-05-13 08:22:27 +00:00
jkh
af4383e1b6 Update the etc world from RELENG_2_2 which is now more up-to-date
(gotta get myself -current again, this is a drag).

Also-fixes-problems-noted-by: Wolfgang Helbig & Joerg Wunsch
1997-05-03 11:22:17 +00:00
jkh
abc578407b Ack, learn to spell "extentions" the same way in the same file.
Also make the output a little less cryptic for sysctl settings.

Suggested by:	bde
1997-05-01 20:28:18 +00:00
jkh
190f7e4d5b YAMF22
PR:		3456
1997-05-01 20:04:42 +00:00
jkh
2787104770 YAMF22 1997-05-01 04:38:16 +00:00
jkh
7be3f36014 Bring in rc file changes from -current. 1997-04-27 03:59:19 +00:00