- ipv6_prefix_* and ipv6_ifconfig_* work for end node

- rtsol should be work for only one interface
- new variable ipv6_defaultrouter is added
- option name of rtadvd in comment are corrected
- ipv6_firewall_enable, ipv6_firewall_type, ipv6_firewall_script,
  ipv6_firewall_logging are added to introduce rc.firewall6.

IPv6 firewall rule is just starting point and should be brushed up.
This commit includes PR18621, PR21694, PR22051.

PR:		conf/18621, conf/21694, conf/22051
Reviewed by:	asmodai

1 files changed, 12 insertions, 3 deletions

diff --git a/etc/defaults/rc.conf b/etc/defaults/rc.conf
index 0e65914..b761564 100644
--- a/etc/defaults/rc.conf
+++ b/etc/defaults/rc.conf
@@ -84,7 +84,6 @@ icmp_log_redirect="NO"		# Set to YES to log ICMP REDIRECT packets
 network_interfaces="auto"	# List of network interfaces (or "auto").
 ifconfig_lo0="inet 127.0.0.1"	# default loopback device configuration.
 #ifconfig_lo0_alias0="inet 127.0.0.254 netmask 0xffffffff" # Sample alias entry.
-#ifconfig_ed0_alias0="inet6 fec0:0000:0000:0005::1 prefixlen 64" # Sample alias entry for IPv6.
 #ifconfig_ed0_ipx="ipx 0x00010010"	# Sample IPX address family entry.
 #
 # If you have any sppp(4) interfaces above, you might also want to set
@@ -216,6 +215,7 @@ icmp_bmcastecho="NO"	# respond to broadcast ping packets
 ### IPv6 options: ###
 ipv6_enable="NO"		# Set to YES to set up for IPv6.
 ipv6_network_interfaces="auto"	# List of network interfaces (or "auto").
+ipv6_defaultrouter="NO"		# Set to IPv6 default gateway (or NO).
 ipv6_static_routes=""		# Set to static route list (or leave empty).
 #ipv6_static_routes="xxx"	# An example to set fec0:0000:0000:0006::/64
 				#  route toward loopback interface.
@@ -226,10 +226,12 @@ ipv6_router="/usr/sbin/route6d"	# Name of IPv6 routing daemon.
 ipv6_router_flags=""		# Flags to IPv6 routing daemon.
 #ipv6_router_flags="-l"		# Example for route6d with only IPv6 site local
 				# addrs.
-#ipv6_network_interfaces="ed0 ep0"	# Examples for router.
+#ipv6_network_interfaces="ed0 ep0"	# Examples for router
+					# or static configuration for end node.
 					# Choose correct prefix value.
 #ipv6_prefix_ed0="fec0:0000:0000:0001 fec0:0000:0000:0002"  # Examples for rtr.
 #ipv6_prefix_ep0="fec0:0000:0000:0003 fec0:0000:0000:0004"  # Examples for rtr.
+#ipv6_ifconfig_ed0="fec0:0:0:5::1 prefixlen 64"	# Sample alias entry
 ipv6_default_interface=""	# Default output interface for scoped addrs.
 				# Now this works only for IPv6 link local
 				# multicast addrs.
@@ -256,8 +258,15 @@ stf_interface_ipv4plen="0"	# Prefix length for 6to4 IPv4 addr,
 stf_interface_ipv6_ifid="0:0:0:1"	# IPv6 interface id for stf0.
 				# If you like, you can set "AUTO" for this.
 stf_interface_ipv6_slaid="0000"	# IPv6 Site Level Aggregator for stf0
-ipv6_ipv4mapping="YES";		# Leave empty to disable IPv4 mapped IPv6 addr
+ipv6_ipv4mapping="YES"		# Leave empty to disable IPv4 mapped IPv6 addr
 				# communication. (like ::ffff:a.b.c.d)
+ipv6_firewall_enable="NO"	# Set to YES to enable IPv6 firewall
+				# functionality
+ipv6_firewall_script="/etc/rc.firewall6" # Which script to run to set up the IPv6 firewall
+ipv6_firewall_type="UNKNOWN"	# IPv6 Firewall type (see /etc/rc.firewall6)
+ipv6_firewall_quiet="NO"	# Set to YES to suppress rule display
+ipv6_firewall_logging="NO"	# Set to YES to enable events logging
+ipv6_firewall_flags=""		# Flags passed to ip6fw when type is a file
 
 ##############################################################
 ###  System console options  #################################