For the firewall_* variables that are specific to the "workstation"

firewall type, note that property in their description.

MFC after:	1 week

1 files changed, 9 insertions, 7 deletions

diff --git a/etc/defaults/rc.conf b/etc/defaults/rc.conf
index 720ebf1..e82da9d 100644
--- a/etc/defaults/rc.conf
+++ b/etc/defaults/rc.conf
@@ -116,15 +116,17 @@ firewall_quiet="NO"		# Set to YES to suppress rule display
 firewall_logging="NO"		# Set to YES to enable events logging
 firewall_flags=""		# Flags passed to ipfw when type is a file
 firewall_myservices=""		# List of TCP ports on which this host
-				#  offers services
-firewall_allowservices=""	# List of IPs which has access to
-				#  $firewall_myservices
-firewall_trusted=""		# List of IPs which has full access to this host
+				# offers services for "workstation" firewall.
+firewall_allowservices=""	# List of IPs which have access to
+				# $firewall_myservices for "workstation"
+				# firewall.
+firewall_trusted=""		# List of IPs which have full access to this
+				# host for "workstation" firewall.
 firewall_logdeny="NO"		# Set to YES to log default denied incoming
-				#  packets.
+				# packets for "workstation" firewall.
 firewall_nologports="135-139,445 1026,1027 1433,1434" # List of TCP/UDP ports
-				#  for which denied incoming packets are not
-				#  logged.
+				# for which denied incoming packets are not
+				# logged for "workstation" firewall.
 firewall_nat_enable="NO"	# Enable kernel NAT (if firewall_enable == YES)
 firewall_nat_interface=""	# Public interface or IPaddress to use
 firewall_nat_flags=""		# Additional configuration parameters