IPFIREWALL_DEFAULT_TO_ACCEPT becomes default to deny
Devon H. O'Dell
dodell at sitetronics.com
Fri Feb 6 07:06:26 PST 2004
Gogh, Ruben van wrote:
> Hey Guys,
>
> today I upgraded to 4.8-RELEASE-p15. As usual I set IPFIREWALL to default
> accept in my kernel config file.
> Config & make weren't complaining so, installed the kernel, reboot and there
> it was:
>
>>IP packet filtering initialized, divert disabled, rule-based forwarding
>
> enabled, default to deny, logging disabled
>
> Another rebuild didn't work out so... I reviewed /usr/src/UPDATING but
> there's no such thing as dropping IPFIREWALL_DEFAULT_TO_ACCEPT.
>
> So, is this a true bug or what?
>
> Regards,
>
> Ruben
I'm not sure what to make of this as IPFIREWALL_DEFAULT_TO_ACCEPT works fine
for me in 4.8, 4.9, 5.1 and 5.2. Are you sure you compiled with the correct
kernel configuration (and installed as well)?
Additionally, you might like to look into setting firewall_enable="YES" and
firewall_type="open" in rc.conf
Kind regards,
Devon H. O'Dell
More information about the freebsd-security
mailing list