|
Last change
on this file since 10417 was 10417, checked in by rick, 13 years ago |
|
Merging and cleanups of files found in various other places and trees of SVN.
|
-
Property svn:eol-style
set to
LF
|
|
File size:
1.5 KB
|
| Line | |
|---|
| 1 | # No kernel dumps as we don't have a place to store them
|
|---|
| 2 | dumpdev="NO"
|
|---|
| 3 | # We are an router/gateway (wireless to be precise)
|
|---|
| 4 | gateway_enable="YES"
|
|---|
| 5 |
|
|---|
| 6 | # NTP server needs working config with WL network or internet on boot
|
|---|
| 7 | # so some warnings might pop up, but no harm
|
|---|
| 8 | ntpdate_enable="YES"
|
|---|
| 9 | ntpd_enable="YES"
|
|---|
| 10 | ntpd_sync_on_start="YES"
|
|---|
| 11 | ntpd_flags="-p /var/run/ntpd.pid -f /var/db/ntp.drift"
|
|---|
| 12 |
|
|---|
| 13 | # We need no running mail server
|
|---|
| 14 | sendmail_enable="NONE"
|
|---|
| 15 |
|
|---|
| 16 | # Don't let syslog accept input from other remote hosts
|
|---|
| 17 | syslogd_enable="YES"
|
|---|
| 18 | syslogd_flags="-s -A -c"
|
|---|
| 19 |
|
|---|
| 20 | # Remote login without DNS checking as it might not also be functionable
|
|---|
| 21 | # -u0 prevent sshd from making DNS requests unless the authentication mechanism
|
|---|
| 22 | # or configuration requires it.
|
|---|
| 23 | sshd_enable="YES"
|
|---|
| 24 | sshd_flags="-u0"
|
|---|
| 25 |
|
|---|
| 26 | # Monitoring deamons
|
|---|
| 27 | nrpe2_enable="YES"
|
|---|
| 28 | snmpd_enable="YES"
|
|---|
| 29 | snmpd_flags="-a -LF w /var/log/snmpd.log"
|
|---|
| 30 |
|
|---|
| 31 | # HTTP(S) proxy server
|
|---|
| 32 | tinyproxy_enable="YES"
|
|---|
| 33 |
|
|---|
| 34 | # Make sure generated ssh keys are saved
|
|---|
| 35 | nanobsd_save_sshkeys_enable="YES"
|
|---|
| 36 |
|
|---|
| 37 | # low-memory footprint DHCP and non-autoritive recursive DNS resolver
|
|---|
| 38 | dnsmasq_enable="YES"
|
|---|
| 39 |
|
|---|
| 40 | # Explicitly disable the memory-hungry alternatives
|
|---|
| 41 | dhcpd_enable="NO"
|
|---|
| 42 | named_enable="NO"
|
|---|
| 43 | named_auto_forward="YES"
|
|---|
| 44 |
|
|---|
| 45 | # WL Captive Portal and WL Web Config Overview
|
|---|
| 46 | thttpd_enable="YES"
|
|---|
| 47 | http302_enable="YES"
|
|---|
| 48 |
|
|---|
| 49 | # Hybrid setup, requires outgoing VPN Server
|
|---|
| 50 | openvpn_enable="NO"
|
|---|
| 51 | openvpn_if="tap"
|
|---|
| 52 |
|
|---|
| 53 | # Enable the firewall by default
|
|---|
| 54 | pf_enable="YES"
|
|---|
| 55 | pf_rules="/etc/pf.default.conf"
|
|---|
| 56 | pf_flags="-D ext_if=vr0 -D int_if=vr1 -D publicnat={80,443}"
|
|---|
Note:
See
TracBrowser
for help on using the repository browser.
