summaryrefslogtreecommitdiffstats
path: root/etc/defaults
diff options
context:
space:
mode:
authoryar <yar@FreeBSD.org>2005-10-02 18:59:02 +0000
committeryar <yar@FreeBSD.org>2005-10-02 18:59:02 +0000
commit327895a26d00e4a20e74f7f0f563dbda350408fa (patch)
tree06f160b8333b1fa086d351d997b7534badaf42fb /etc/defaults
parent57ff4e8e87ba086a7cc0b2bb654094221fa7ed55 (diff)
downloadFreeBSD-src-327895a26d00e4a20e74f7f0f563dbda350408fa.zip
FreeBSD-src-327895a26d00e4a20e74f7f0f563dbda350408fa.tar.gz
Add an rc.d script to start pfsync at the right moment of the
system boot, and hook it up in the system. The separate script is needed because in the presence of various interface lists in rc.conf ($network_interfaces, $cloned_interfaces, $sppp_interfaces, $gif_interfaces, more to come) it is hard to start them orderly, so that pfsync is brought up after its syncdev, which is required for the proper startup of pfsync. Discussed with: mlaier on -pf MFC after: 5 days
Diffstat (limited to 'etc/defaults')
-rw-r--r--etc/defaults/rc.conf3
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/defaults/rc.conf b/etc/defaults/rc.conf
index 34b1add..1385061 100644
--- a/etc/defaults/rc.conf
+++ b/etc/defaults/rc.conf
@@ -135,6 +135,9 @@ pflog_enable="NO" # Set to YES to enable packet filter logging
pflog_logfile="/var/log/pflog" # where pflogd should store the logfile
pflog_program="/sbin/pflogd" # where the pflogd program lives
pflog_flags="" # additional flags for pflogd
+pfsync_enable="NO" # Expose pf state to other hosts for syncing
+pfsync_syncdev="" # Interface for pfsync to work through
+pfsync_ifconfig="" # Additional options to ifconfig(8) for pfsync
tcp_extensions="YES" # Set to NO to turn off RFC1323 extensions.
log_in_vain="0" # >=1 to log connects to ports w/o listeners.
tcp_keepalive="YES" # Enable stale TCP connection timeout (or NO).
OpenPOWER on IntegriCloud