diff options
| author | dougb <dougb@FreeBSD.org> | 2009-06-26 01:04:50 +0000 |
|---|---|---|
| committer | dougb <dougb@FreeBSD.org> | 2009-06-26 01:04:50 +0000 |
| commit | afb1ba786ce236d95596ca2a2016b052322a958c (patch) | |
| tree | 0e6c162ed99032cc18d175278759fff52da56651 /etc | |
| parent | b12e6106871c9f9db8ac89ad07ec44bb1bf3e880 (diff) | |
| download | FreeBSD-src-afb1ba786ce236d95596ca2a2016b052322a958c.zip FreeBSD-src-afb1ba786ce236d95596ca2a2016b052322a958c.tar.gz | |
Reverse the effect of r193198 for pf and ipfw which will once again
allow them to start after netif. There were too many problems reported
with this change in the short period of time that it lived in HEAD, and
we are too late in the release cycle to properly shake it out.
IMO the issue of having the firewalls up before the network is still a
valid concern, particularly for pf whose default state is wide open.
However properly solving this issue is going to take some investment
on the part of the people who actually use those tools.
This is not a strict reversion of all the changes for r193198 since it
also included some simplification of the BEFORE/REQUIRE logic which is
still valid for ipfilter and ip6fw.
Diffstat (limited to 'etc')
| -rwxr-xr-x | etc/rc.d/NETWORKING | 2 | ||||
| -rwxr-xr-x | etc/rc.d/ipfw | 2 | ||||
| -rwxr-xr-x | etc/rc.d/netif | 2 | ||||
| -rwxr-xr-x | etc/rc.d/pf | 2 | ||||
| -rwxr-xr-x | etc/rc.d/pflog | 2 | ||||
| -rwxr-xr-x | etc/rc.d/pfsync | 2 |
6 files changed, 6 insertions, 6 deletions
diff --git a/etc/rc.d/NETWORKING b/etc/rc.d/NETWORKING index a67501b..c72fe0c 100755 --- a/etc/rc.d/NETWORKING +++ b/etc/rc.d/NETWORKING @@ -4,7 +4,7 @@ # # PROVIDE: NETWORKING NETWORK -# REQUIRE: netif netoptions routing network_ipv6 ppp +# REQUIRE: netif netoptions routing network_ipv6 ppp ipfw # REQUIRE: defaultroute routed mrouted route6d mroute6d resolv # This is a dummy dependency, for services which require networking diff --git a/etc/rc.d/ipfw b/etc/rc.d/ipfw index 43956e4..872f278 100755 --- a/etc/rc.d/ipfw +++ b/etc/rc.d/ipfw @@ -4,7 +4,7 @@ # # PROVIDE: ipfw -# REQUIRE: FILESYSTEMS +# REQUIRE: ppp # KEYWORD: nojail . /etc/rc.subr diff --git a/etc/rc.d/netif b/etc/rc.d/netif index 7d630c5..7d79745 100755 --- a/etc/rc.d/netif +++ b/etc/rc.d/netif @@ -27,7 +27,7 @@ # PROVIDE: netif # REQUIRE: atm1 cleanvar FILESYSTEMS serial sppp sysctl -# REQUIRE: ipfilter ipfs pf ipfw +# REQUIRE: ipfilter ipfs # KEYWORD: nojail . /etc/rc.subr diff --git a/etc/rc.d/pf b/etc/rc.d/pf index 21ce825..f1044a3 100755 --- a/etc/rc.d/pf +++ b/etc/rc.d/pf @@ -4,7 +4,7 @@ # # PROVIDE: pf -# REQUIRE: FILESYSTEMS pflog pfsync +# REQUIRE: FILESYSTEMS netif pflog pfsync # BEFORE: routing # KEYWORD: nojail diff --git a/etc/rc.d/pflog b/etc/rc.d/pflog index b6398a1..001ad38 100755 --- a/etc/rc.d/pflog +++ b/etc/rc.d/pflog @@ -4,7 +4,7 @@ # # PROVIDE: pflog -# REQUIRE: FILESYSTEMS cleanvar +# REQUIRE: FILESYSTEMS netif cleanvar # KEYWORD: nojail . /etc/rc.subr diff --git a/etc/rc.d/pfsync b/etc/rc.d/pfsync index ba86154..8be8928 100755 --- a/etc/rc.d/pfsync +++ b/etc/rc.d/pfsync @@ -4,7 +4,7 @@ # # PROVIDE: pfsync -# REQUIRE: FILESYSTEMS +# REQUIRE: FILESYSTEMS netif # KEYWORD: nojail . /etc/rc.subr |
