Changeset 13459 in hybrid

Timestamp:

Oct 18, 2015, 4:51:23 PM (9 years ago)

Author:

huub

Message:

ipfw overgenomen uit 9.0 de pf conf files nog maar even laten staan

Location:

branches/releng-10/nanobsd/files/etc

Files:

• ipfw.sh (added)
• rc.conf (modified) (3 diffs)

branches/releng-10/nanobsd/files/etc/rc.conf

@@ -29 +29 @@
 netwait_timeout="20"
 netwait_ip="8.8.8.8 172.16.4.46 172.27.129.1 172.17.14.1"
-
 
 # Block the full range as smaller subnets are used for allowances, this avoids
@@ -78 +77 @@
 # low-memory footprint DHCP and non-authorative recursive forwarding DNS resolver
 dnsmasq_enable="NO"
-local_unbound_enable="YES"
+local_unbound_enable="NO"
+unbound_enable="YES"
 
 # Explicitly disable the memory-hungry alternatives
@@ -94 +94 @@
 
 # Enable the firewall by default
-pf_enable="YES"
-pf_rules="/etc/pf.open.conf"
-pf_flags=''
-# Used with Proxy Configuration
-#pf_rules="/etc/pf.proxy.conf"
-#pf_flags="-D ext_if=vr0 -D int_if=vr1 -D publicnat={80,443}"
-# Used with Node Configuration 
-#pf_rules="/etc/pf.node.conf"
-#pf_flags="-D captive_portal_interfaces=wlan0,wlan1"
-# Used with Hybrid Configuration
-#pf_rules="/etc/pf.hybrid.conf"
-#pf_flags="-D ext_if=vr0 -D captive_portal_interfaces=wlan0 -D publicnat=80,443"
-
+# Firewall needed for port redirection (captive portal, splash screen), use ipfw not pf
+firewall_enable="YES"
+firewall_script="/etc/ipfw.sh"
 
 # Autogenerated flags are used during runtime