source: hybrid/branches/releng-9.0/nanobsd/files/etc/ipfw.sh@ 10185

## Building options
dumpdev="NO"                    # No kernel dumps as we don't have a place to
                                # store them 
ipv6_enable="NO"                # No IPv6 support for now, near feature... ;-)

# NTP server needs working config with WL network or internet on boot
# so some warnings might pop up, but no harm
ntpdate_enable="YES"
ntpd_enable="YES"
ntpd_sync_on_start="YES"
ntpd_flags="-p /var/run/ntpd.pid -f /var/db/ntp.drift"

# We need no running mail server
sendmail_enable="NONE"

# Don't let syslog accept input from other remote hosts
syslogd_enable="YES"
syslogd_flags="-s -A -c"

# Remote login without DNS checking as it might not also be functionable
# -u0 prevent sshd from making DNS requests unless the authentication mechanism
# or configuration requires it.
sshd_enable="YES"
sshd_flags="-u0"

# Don't update the motd as it not writeable, the update_nanobsd_motd is a
# simple wrapper found at /usr/local/etc/rc.d supporting this featureg
update_motd="NO"
update_nanobsd_motd="YES"

# Monitoring deamons
nrpe2_enable="YES"
snmpd_enable="YES"
snmpd_flags="-a -LF w /var/log/snmpd.log"

# HTTP(S) proxy server
tinyproxy_enable="YES"

# Make sure generated ssh keys are saved 
nanobsd_save_sshkeys_enable="YES"

## Port extentions
# Serve our clients some pretty cool IP address to at least get connected
# Also some low-memory footprint dns resolver
dnsmasq_enable="YES"

## WL ports extentions
thttpd_enable="YES"
http302_enable="YES"

# Make sure generated ssh keys are saved 
nanobsd_save_sshkeys_enable="YES"

#Hybrid
openvpn_enable="YES"
openvpn_if="tap"
cloned_interfaces="bridge0"
gateway_enable="YES"
pf_enable="YES"
pf_rules="/etc/pf.conf.ileiden"
pf_flags=""
pf2_enable="YES"