Commit Graph

320 Commits

Author SHA1 Message Date
Jeroen Ruigrok van der Werven
4c27efd514 Add weak_mountd_authentication, which is examined in /etc/rc.network.
Setting this to YES instead of its default NO, causes mountd to be
passed the -n flag, which allow non-root users mount requests to be served.
2000-07-23 11:31:09 +00:00
Mark Murray
b74aa5644c Add entropy caching. With this, some entropy is cached at shutdown
time, and this is used to reseed the random number generator at
boot time.

NOTE - this has no hope of working if you halt(); you need to
execute rc.shutdown to get the entropy stash.
2000-07-17 12:28:58 +00:00
Mark Murray
2c00ff8434 Clean up all the old setup code for the old /dev/random. This will be
revisited when the new /dev/random is done.
2000-06-25 10:55:23 +00:00
Brian Somers
f3e285ba7d Introduce /etc/defaults/periodic.conf, similar in concept to rc.conf.
The only change in the default functionality should be that
the output reports are slightly more verbose WRT files deleted.

Not objected to by: freebsd-arch
2000-06-23 01:18:31 +00:00
Matthew Dillon
55f087be8e Add ip_portrange_first and ip_portrange_last rc.conf/rc.network
options.  This allows you to set the standard dynamic port
    assignment range prior to any network daemons (like named) starting
    up, necessary if you are also using a firewall to restrict lower ports.
    will be MFC'd in a few days
2000-06-22 17:40:53 +00:00
Brian Somers
62c967e130 Don't include /compat/linux/tmp in $clean_daily_dirs as it's usually
a link to /tmp

Pointed out by: des
2000-06-20 14:58:48 +00:00
Brian Somers
59f32c3a6a Add clear_daily_* variables 2000-06-09 17:07:15 +00:00
Wilko Bulte
ac8c5ad22d Add suggested comment for TCP_DROP_SYNFIN and TCP_RESTRICT_RST
PR:		conf/18124
Submitted by:	Matt Heckaman <matt@arpa.mail.net>
2000-05-27 18:03:15 +00:00
Garrett Wollman
1940c51aac Fix misleading comment. 2000-05-18 19:02:47 +00:00
Matthew Dillon
ba3ed2268c Add ipsec_enable and ipsec_file options to run IPSEC's setkey program
with the specified configuration file at the appropriate time.
2000-05-16 06:52:11 +00:00
Andrey A. Chernov
be08c4bfc8 Add firewall_logging knob to enable/disablle events logging, disabled
by default. Needed mainly for ipfw kernel module to enable logging
disabled there.
2000-05-06 17:18:19 +00:00
Sheldon Hearn
f66e7afa28 Add to defaults/rc.conf a new function source_rc_confs which rc
scripts may use to source safely overrides in ${rc_conf_files}
files.

This protects users who insist on the bad practice of copying
/etc/defaults/rc.conf to /etc/rc.conf from a recursive loop
that exhausts available file descriptors.

Several people have expressed interest in breaking this function
out into its own shell script.  Anyone who wants to embark on
such an undertaking would do well to study the attributed PR.

PR:		17595
Reported by:	adrian
Submitted by:	Doug Barton <Doug@gorean.org>
2000-04-27 08:43:49 +00:00
Mitsuru IWASAKI
ece27d97a4 Enable etc/defaults/pccard.conf which is default configuration file
for pccardd.
Please install /etc/defaults/pccard.conf and update /etc/defaults/rc.conf
as well.
Note that old pccard.conf.sample still remains for while but
no longer to be maintained.

Reviewed by:	imp, -mobile ML and nomads ML in Japan.
2000-04-03 19:24:25 +00:00
Yoshinobu Inoue
7e757977d9 Fix english.
Specified by: sheldonh
2000-03-29 15:03:28 +00:00
Yoshinobu Inoue
39257a7c67 Add a configuration options which enable/disable IPv4 mapped IPv6 addr
support.

Suggested and Reviewed by: ume
2000-03-28 17:39:53 +00:00
Matthew Dillon
8d1b3828fa Add a sysctl to specify the amount of UDP receive space NFS should
reserve, in maximal NFS packets.  Originally only 2 packets worth of
    space was reserved.  The default is now 4, which appears to greatly
    improve performance for slow to mid-speed machines on gigabit networks.

    Add documentation and correct some prior documentation.

Problem Researched by: Andrew Gallatin <gallatin@cs.duke.edu>
Approved by: jkh
2000-03-27 21:38:35 +00:00
Bill Fumerola
508d5dad20 Make syslogd boot -s by default, which prevents Bad People from filling up
your diskspace.

PR:		conf/15737
Submitted by:	Kevin Day <toasty@dragondata.com> (PR)
		Nick Johnson <freebsd@spatula.net> (on -current)
2000-03-20 19:53:56 +00:00
Yoshinobu Inoue
03172c2b49 IPv6 related configuration updates.
- 6to4(stf) interface configuration.
  - Static route configuration.
  - Comment additions.
  - Replaced a still existed '@' to '%' in IPv6 scoped addr format.
    (This became necessary as previous IPv6 scoped addr format change.)

Much thanks to ume, who helped me reviewing, testing, and finding problems
with these changes.

Approved by: jkh

Reviewed by: ume
2000-03-12 20:35:54 +00:00
Yoshinobu Inoue
c384bccfe2 Change default of rtadvd to "YES".
Also add IPv6 example for "ifconfig_ifname_alias".

Suggested by: bmah@CA.Sandia.GOV
2000-03-09 15:19:58 +00:00
Mark Murray
0d854656e9 Add userland tweakables for OpenSSH and OpenSSL. 2000-02-24 23:08:19 +00:00
Yoshinobu Inoue
0908c83946 Add IPv6 configuration scripts.
Initial version created by, and kindly much tested by:
	bmah@CA.Sandia.GOV (Bruce A. Mah)

Approved by: jkh

Reviewed by: bmah@CA.Sandia.GOV (Bruce A. Mah),
	Ollivier Robert <roberto@keltia.freenix.fr>
Obtained from: KAME project
2000-02-23 18:05:58 +00:00
Jordan K. Hubbard
956ef11d64 PS/2 mice are a lot more common than serial mice now; use /dev/psm0
as default rather than /dev/cuaa0
2000-02-19 13:07:21 +00:00
Paul Richards
f49c61a73a Add a firewall_flags option that is used when ipfw processes a file. It allows
you to run a preprocessor, such as m4, so that you can use macros in your
rules file.

Approved by:	jkh
2000-02-06 19:25:00 +00:00
Sheldon Hearn
722636354c Add an explicit warning against copying this file into /etc/, since
work-arounds for the ".: Out of file descriptors" problem (see
PR 13724) are taking longer than expected to come to fruition.
1999-12-21 10:46:41 +00:00
Ollivier Robert
35703ff899 Bye bye xntpd, enter ntp.
The variable names haven't changed for compapatibility reasons.
1999-12-16 12:45:40 +00:00
Andrew Gallatin
86298776d2 Add an enable_osf1 knob to the alpha startup code 1999-12-15 14:27:59 +00:00
Warner Losh
b11b638301 Now that pccardc beep actually works, add knob for it in rc.conf/rc.pccard
Submitted by: sanpei@sanpei.org (MIHIRA-san Yoshiro)
1999-12-02 19:48:16 +00:00
Alfred Perlstein
f41581f80f we all like to 'Use' ppp, but this should be 'User'
Pointed out by: dcs
1999-11-24 10:44:47 +00:00
Andrey A. Chernov
0a0be98ce3 Remove man_locales - goes to manpath.config 1999-11-23 03:24:20 +00:00
Brian Somers
6c62fd3e55 Add pppoed startup options 1999-11-23 00:22:25 +00:00
Andrey A. Chernov
319f15a262 Add single_mountd_enable hook to run mountd but not NFS server
Needed for machine with CFS but without real NFS
1999-11-14 21:28:13 +00:00
David E. O'Brien
29abbacb90 Remove "-k" (kernel-arch) as "i386" is not appropriate on the Alpha.
Also remove the "-d" domain option, as if someone is savey enough to want
this, they are savey enought to make a custom amd_flags in /etc/rc.conf.
1999-10-16 05:42:50 +00:00
Bill Fumerola
f967923cf8 If dumpdev exists, it's automatically enabled. Change comment to reflect. 1999-10-01 00:13:44 +00:00
Joseph Koshy
8e814a064f Remove the "vinum_drives" rc.conf knob. According to Greg <grog@lemis.com>
this is no longer the right way to start Vinum unless you are doing some
kind of maintenance, and that's not the sort of thing that would go into
rc.conf.
1999-09-22 06:31:32 +00:00
David E. O'Brien
24002cc8bc /emulation/binary compatibility/ 1999-09-15 02:25:13 +00:00
Dag-Erling Smørgrav
8dc47ef606 Fix disordering introduced in my previous commit.
Pointed out by:	bde
1999-09-13 09:45:07 +00:00
Dag-Erling Smørgrav
e46cd3d4d2 Add the net.inet.tcp.restrict_rst and net.inet.tcp.drop_synfin sysctl
variables, conditional on the TCP_RESTRICT_RST and TCP_DROP_SYNFIN kernel
options, respectively. See the comments in LINT for details.
1999-09-12 17:22:08 +00:00
Andrey A. Chernov
c664bb9110 Add man_locales knob to specify localized man subdirs for makewhatis and
catman
1999-09-11 19:00:41 +00:00
Chris Piazza
22e1fe88a2 set check_quotas="YES" as the default.
PR:		13603
Submitted by:	Alex Perel <veers@distributed.net>
Reviewed by:	billf
1999-09-06 20:22:40 +00:00
Peter Wemm
9b7a44a60e $Id$ -> $FreeBSD$ 1999-08-27 23:37:10 +00:00
Brian Somers
cdd53d9ce9 ppp_alias -> ppp_nat
Submitted by: Josef L. Karthauser <joe@FreeBSD.org.uk>
1999-08-22 23:26:05 +00:00
David E. O'Brien
0a06bd4111 s/Yes/YES/g. `tcp_extensions''s comment implied "Yes" was a valid value
for turning on the feature.  Which is wrong.

Submitted by:	bde
1999-08-14 17:15:19 +00:00
David E. O'Brien
095de884aa Hopefully clarify "log_in_vain" knob's comment.
Reviewed by:	bde, sheldonh, andreas
1999-08-14 17:13:40 +00:00
David E. O'Brien
c0a594a112 Use proper capitalization. 1999-08-14 03:42:27 +00:00
David E. O'Brien
721d62f7be Use better comment for tcp_keepalive option.
Submitted by:	imp
1999-08-14 03:41:56 +00:00
Dag-Erling Smørgrav
18d3153ead Add net.inet.icmp.log_redirect and net.inet.icmp.drop_redirect, for
respectively logging and dropping ICMP REDIRECT packets.

Note that there is no rate limiting on the log messages, so log_redirect
should be used with caution (preferrably only for debugging purposes).
1999-08-10 09:45:33 +00:00
Eivind Eklund
e95e0696fa Better comment on ntpdate_enable - if I have misunderstood when
ntpdate was run (I thought it was cron'ed), other people probably do
too.
1999-08-03 10:11:02 +00:00
Brian Somers
51f80ae148 Add a default ppp.conf (mode 600).
Originally submitted by: Wayne Self <wself@cdrom.com>

Allow a ppp startup option in rc.conf.

Adjust sysinstall so that it appends to the end of ppp.conf
and uses the generated profile to start ppp in auto mode on
boot.

Submitted by: Josef L. Karthauser <joe@uk.FreeBSD.org>
1999-07-26 10:49:37 +00:00
Jordan K. Hubbard
2a622f9d9f Use a less annoying default hostname. 1999-07-18 09:58:01 +00:00
Jordan K. Hubbard
e98e9050af Allow DHCP to be used in an ifconfig variable instead of the usual
address information, producing the obvious effect (dhcp configuration).

Submitted by:   "Sean O'Connell" <sean@stat.Duke.EDU>
1999-07-16 09:26:53 +00:00
Mitsuru IWASAKI
325d70e4ed Refine on explanation for apm stuff.
Make it clear that apmd  depends on apmconf -e.

Reviewed by:	obrien, my friend :-)
1999-07-12 17:20:29 +00:00
Mitsuru IWASAKI
6f0b5cda2f Add apmd_enable and apmd_flags for the boot-time optinos.
Pointed out by:	obrien
Forgotten by:	iwasaki
1999-07-11 04:05:45 +00:00
Sheldon Hearn
10d03f50ad Allow internal and external wrapping to be enabled independantly of
each other. Instead of allowing the -w option to be specified twice,
we now take -w (wrap external) and -W (wrap internal).

Discussed with:	markm
1999-07-09 11:19:01 +00:00
Peter Wemm
d45821b19b Tweak previous commit. Only sense the configuration if network_interfaces
is set to "auto".  Any network_interfaces settings will be treated as
before.
1999-07-08 18:56:04 +00:00
Peter Wemm
9c65a84aea Do away with ${network_interfaces} in rc.conf. Just use ifconfig -l to
get a list of interfaces, and then automatically configure them if
${ifconfig_${ifn}} or /etc/start_if.${ifn} exists.

This makes it a lot easier to deal with machines that constantly change
their network configuration as you can leave ifconfig settings for all
the possible cards - just the ones that are present will be configured.
1999-07-07 12:49:47 +00:00
Tatsumi Hosokawa
8076c80767 Added pccard_conf parameter to /etc/rc.conf,
and set it to "/etc/pccard.conf.sample" in /etc/defaults/rc.conf.
Perhaps this default value can be inappropriate,
but I set to this value for the convenience of PC-card boot.flp users.
Please correct it if there are better solutions.
1999-07-07 01:19:15 +00:00
Tatsumi Hosokawa
6d0cab6541 Added "pccardd_flags" for rc.conf. 1999-07-04 14:41:20 +00:00
David E. O'Brien
8fc9820d7a Amd now mounts to "/.amd_mnt" rather than "/net". "/net/<host>" now works
in addition to "/host/<host>".  This make us consistant with Sun (as we
already were with SGI).
1999-06-28 04:09:14 +00:00
Justin M. Seger
c7880f911b Standardize appearance of subsection headers (two spaces for section name) 1999-06-27 22:12:35 +00:00
Sheldon Hearn
54f5ebed00 Add command-line option (-w), specified once to enable wrapping and
twice to enable wrapping for internal wrapping as well. If the option is
not specified wrapping is turned off so that inetd will behave exactly
as it used to before TCP Wrappers was imported.

Change etc/defaults/rc.conf so as to encourage wrapping on new systems.

Clarify the use of TCP Wrappers in the IMPLEMENTATION NOTES of the
manual page.

Approved by:	jkh
1999-06-27 18:05:34 +00:00
Poul-Henning Kamp
2c7b227278 Add handle to control global TCP keepalives and turn them on as
default.

Despite their name it doesn't keep TCP sessions alive, it kills
them if the other end has gone AWOL.  This happens a lot with
clients which use NAT, dynamic IP assignment or which has a 2^32
* 10^-3 seconds upper bound on their uptime.

There is no detectable increase in network trafic because of this:
two minimal TCP packets every two hours for a live TCP connection.

Many servers already enable keepalives themselves.

The host requirements RFC is 10 years old, and doesn't know about
the loosing clients of todays InterNet.
1999-06-05 05:45:57 +00:00
Poul-Henning Kamp
f840bacd9a Change tcp_extension comment.
Submitted by:	Studded <Studded@gorean.org>
Reviewed by:	phk
1999-05-16 09:19:44 +00:00
Dag-Erling Smørgrav
3e297f8d95 Allow the user to specify a different firewall script than /etc/rc.firewall. 1999-04-10 10:56:58 +00:00
Greg Lehey
6f16baa899 Add variable start_vinum. If set to YES, it will start vinum and
automagically find all the partitions.  This is to be preferred to the
somewhat emetic usage of vinum_slices and the equally obnoxious 'vinum
read' command.
1999-04-02 07:15:44 +00:00
Warner Losh
a780977066 Add two features:
log_in_vain:
	log_in_vain turns on logging for packets to ports for which
	there is no listener.
    rc.sysctl:
	A generic way to set sysctl values.  It reads /etc/syslog.conf
	and sets values based on that.  No /etc/syslog.conf has been
	checked in yet, and I've not added this to the makefile yet
	until I get more feedback.

Reviewed by: -current, -hackers and bde especially
1999-03-28 20:36:03 +00:00
Brian Somers
72a042f2bf Add natd_program and change a comment. 1999-03-24 10:27:46 +00:00
Bill Fumerola
61bf4caf49 Split check_quotas into check_quotas and enable_quotas
enable_quotas - use quotas on your system
check_quotas - check for violations on startup

By assuming that a system was neat and without violation before it booted
we can skip a long (and at that point needless) process.

Submitted by:	Alex Perel <veers@disturbed.net>
1999-03-17 04:00:04 +00:00
James FitzGibbon
1dd418124c Add ${lpd_program} and ${portmap_program} as variables in rc.conf, with
suitable defaults pointing to the FreeBSD-shipped versions.  This will allow
for easier integration of third-party replacements for these daemons.
Reviewed by: Several members of -committers
1999-03-11 16:17:24 +00:00
Poul-Henning Kamp
df1fd5ada5 Change the comment to sendmail_flags which has scared so many people
from removing -bd to something more sensible.
1999-03-03 15:04:33 +00:00
Jordan K. Hubbard
d105b00084 Move rc.conf into defaults/ directory. This is part of a larger series
of commits to deal with the rc.conf.site confusion.
1999-02-09 22:15:18 +00:00