source: hybrid/branches/releng-11/nanobsd/files/etc/rc.conf@ 13681

Last change on this file since 13681 was 13681, checked in by rick, 6 years ago

Do not listen on 0.0.0.0:514 (security scanners do not like it).

  • Property svn:eol-style set to LF
File size: 2.9 KB
Line 
1# Stolen from /sbin/dhclient-script using using no /usr based binaries.
2# Converts an commented list into a SEP (default space) seperated list.
3make_list() {
4 SEP=${2:-' '}
5 oldifs="$IFS"
6 IFS="
7"
8 list=""
9 for line in $1; do
10 line=${line%%[ \t#]*}
11 [ -n "$line" ] && list="$list$SEP$line"
12 done
13 IFS=${oldifs}
14 echo ${list##$SEP}
15}
16
17# No kernel dumps as we don't have a place to store them
18dumpdev="NO"
19
20# We are an router/gateway (wireless to be precise) running the lvrouted
21# routing daemon.
22gateway_enable="YES"
23lvrouted_enable="YES"
24lvrouted_flags="-u -s s00p3rs3kr3t -m 28"
25
26# Takes lvrouted an small while to create reachable network nodes, make sure to
27# wait on it,to saves some bootup warnings.
28netwait_enable="YES"
29netwait_timeout="20"
30netwait_ip="8.8.8.8 172.16.4.46 172.27.129.1 172.17.14.1"
31
32# Block the full range as smaller subnets are used for allowances, this avoids
33# traffic going out (due to the default route) to unreachable parts to the
34# 172.16.0.0/12 network.
35static_routes="quickstop"
36route_quickstop="-net 172.16.0.0/12 127.0.0.1 -reject"
37
38# NTP server needs working config with WL network or internet on boot
39# so some warnings might pop up, but no harm
40ntpdate_enable="YES"
41ntpdate_flags="-b -s"
42ntpd_enable="YES"
43ntpd_sync_on_start="YES"
44ntpd_flags="-p /var/run/ntpd.pid -f /var/db/ntp.drift"
45
46# We need no running mail server
47sendmail_enable="NONE"
48
49# Don't let syslog accept input from other remote hosts
50syslogd_enable="YES"
51syslogd_flags="-s -N -A -c"
52
53# Remote login without DNS checking as it might not also be functionable
54# -u0 prevent sshd from making DNS requests unless the authentication mechanism
55# or configuration requires it.
56sshd_enable="YES"
57sshd_flags="-u0"
58
59# Watchdogd: avoid visits because of unit not reachable. If sshd is not running
60# for -t seconds than reboot. This is checked evert -s seconds.
61watchdogd_enable="YES"
62watchdogd_flags="-t 300 -s 60 -e '/etc/rc.d/sshd status'"
63
64# Monitoring deamons
65snmpd_enable="YES"
66snmpd_flags="-Ls 1"
67
68# Performance profiling
69iperf_enable="YES"
70
71# HTTP(S) proxy server
72tinyproxy_enable="NO"
73
74# Make sure generated ssh keys are saved
75nanobsd_save_sshkeys_enable="YES"
76
77# low-memory footprint DHCP and non-authorative recursive forwarding DNS resolver
78dnsmasq_enable="NO"
79local_unbound_enable="NO"
80unbound_enable="YES"
81
82# Explicitly disable the memory-hungry alternatives
83dhcpd_enable="NO"
84dhcpd_flags="-q"
85
86# WL Captive Portal and WL Web Config Overview
87apache24_enable="YES"
88http302_enable="YES"
89
90# Hybrid setup, requires outgoing VPN Server
91openvpn_enable="NO"
92openvpn_if="tap"
93openvpn_configfile="/usr/local/etc/openvpn/client.conf"
94
95# Enable the firewall by default
96# Firewall needed for port redirection (captive portal, splash screen), use ipfw not pf
97firewall_enable="YES"
98firewall_script="/etc/ipfw.sh"
99
100# Autogenerated flags are used during runtime
101rc_conf_running='/etc/rc.conf.running'
102if [ -r $rc_conf_running ]; then
103 . $rc_conf_running
104else
105 : > $rc_conf_running
106fi
Note: See TracBrowser for help on using the repository browser.