Changeset 10419 in hybrid for branches/releng-9.0/nanobsd/files/etc/rc.conf

Timestamp:

Apr 10, 2012, 7:35:39 PM (13 years ago)

Author:

rick

Message:

Rewrote Captive Portal to use Packet Filter (pf) instead. This is much robuster and better administrable then ipfw.

Also cleaned out most of the ugly looking cache code.

File:

• branches/releng-9.0/nanobsd/files/etc/rc.conf (modified) (3 diffs)

branches/releng-9.0/nanobsd/files/etc/rc.conf

@@ -1 +1 @@
 # No kernel dumps as we don't have a place to store them 
 dumpdev="NO"                    
-# We are an router/gateway (wireless to be precise)
+
+# We are an router/gateway (wireless to be precise) running the lvrouted
+# routing daemon.
 gateway_enable="YES"
+lvrouted_enable="YES"
+lvrouted_flags="-u -s s00p3rs3kr3t -m 28"
 
 # NTP server needs working config with WL network or internet on boot
@@ -30 +34 @@
 
 # HTTP(S) proxy server
-tinyproxy_enable="YES"
+tinyproxy_enable="NO"
 
 # Make sure generated ssh keys are saved 
@@ -54 +58 @@
 pf_enable="YES"
 pf_rules="/etc/pf.open.conf"
+pf_flags=''
+# Used with /etc/pf.proxy.conf
+# pf_flags="-D ext_if=vr0 -D int_if=vr1 -D publicnat={80,443}"
+# Used with /etc/pf.node.conf
+# pf_flags="-D captive_portal_interfaces=wlan0,wlan1"