Changeset 10417 in hybrid for branches/releng-9.0/nanobsd/files/etc/rc.conf

Timestamp:

Apr 10, 2012, 2:51:13 PM (13 years ago)

Author:

rick

Message:

Merging and cleanups of files found in various other places and trees of SVN.

File:

• branches/releng-9.0/nanobsd/files/etc/rc.conf (modified) (3 diffs)

branches/releng-9.0/nanobsd/files/etc/rc.conf

@@ -1 @@
-## Building options
-dumpdev="NO"                    # No kernel dumps as we don't have a place to
-                                # store them 
-ipv6_network_interfaces="NONE"  # No IPv6 support for now, near feature... ;-)
+# No kernel dumps as we don't have a place to store them 
+dumpdev="NO"                    
+# We are an router/gateway (wireless to be precise)
+gateway_enable="YES"
 
 # NTP server needs working config with WL network or internet on boot
@@ -24 +24 @@
 sshd_flags="-u0"
 
-# Don't update the motd as it not writeable, the update_nanobsd_motd is a
-# simple wrapper found at /usr/local/etc/rc.d supporting this featureg
-update_motd="NO"
-update_nanobsd_motd="YES"
-
 # Monitoring deamons
 nrpe2_enable="YES"
@@ -40 +35 @@
 nanobsd_save_sshkeys_enable="YES"
 
-## Port extentions
-# Serve our clients some pretty cool IP address to at least get connected
-# Also some low-memory footprint dns resolver
+# low-memory footprint DHCP and non-autoritive recursive DNS resolver
 dnsmasq_enable="YES"
+
+# Explicitly disable the memory-hungry alternatives
+dhcpd_enable="NO"
+named_enable="NO"
 named_auto_forward="YES"
-named_enable="NO"
 
-## WL ports extentions
+# WL Captive Portal and WL Web Config Overview
 thttpd_enable="YES"
 http302_enable="YES"
 
-# Make sure generated ssh keys are saved 
-nanobsd_save_sshkeys_enable="YES"
+# Hybrid setup, requires outgoing VPN Server
+openvpn_enable="NO"
+openvpn_if="tap"
 
-#Hybrid
-openvpn_enable="YES"
-openvpn_if="tap"
+# Enable the firewall by default
+pf_enable="YES"
+pf_rules="/etc/pf.default.conf"
+pf_flags="-D ext_if=vr0 -D int_if=vr1 -D publicnat={80,443}"