source: hybrid/branches/releng-9.0/nanobsd/files/etc/rc.conf@ 10719

# Stolen from /sbin/dhclient-script using using no /usr based binaries.

# Converts an commented list into a SEP (default space) seperated list.

make_list() {

  SEP=${2:-' '}

  oldifs="$IFS"

  IFS="

"

  list=""

  for line in $1; do

    line=${line%%[ \t#]*}

    [ -n "$line" ] && list="$list$SEP$line"

  done

  IFS=${oldifs}

  echo ${list##$SEP}

}



# No kernel dumps as we don't have a place to store them 

dumpdev="NO"                    



# We are an router/gateway (wireless to be precise) running the lvrouted

# routing daemon.

gateway_enable="YES"

lvrouted_enable="YES"

lvrouted_flags="-u -s s00p3rs3kr3t -m 28"



# Block the full range as smaller subnets are used for allowances, this avoids

# traffic going out (due to the default route) to unreachable parts to the

# 172.16.0.0/12 network. 

static_routes="quickstop"

route_quickstop="-net 172.16.0.0/12 127.0.0.1 -reject"



# NTP server needs working config with WL network or internet on boot

# so some warnings might pop up, but no harm

ntpdate_enable="YES"

ntpd_enable="YES"

ntpd_sync_on_start="YES"

ntpd_flags="-p /var/run/ntpd.pid -f /var/db/ntp.drift"



# We need no running mail server

sendmail_enable="NONE"



# Don't let syslog accept input from other remote hosts

syslogd_enable="YES"

syslogd_flags="-s -A -c"



# Remote login without DNS checking as it might not also be functionable

# -u0 prevent sshd from making DNS requests unless the authentication mechanism

# or configuration requires it.

sshd_enable="YES"

sshd_flags="-u0"



# Watchdogd: avoid visits because of unit not reachable. If sshd is not running

# for -t seconds than reboot. This is checked evert -s seconds.

watchdogd_enable="YES"

watchdogd_flags="-t 300 -s 60 -e '/etc/rc.d/sshd status'"



# Monitoring deamons

nrpe2_enable="YES"

snmpd_enable="YES"

snmpd_flags="-Ls 1"



# HTTP(S) proxy server

tinyproxy_enable="NO"



# Make sure generated ssh keys are saved 

nanobsd_save_sshkeys_enable="YES"



# low-memory footprint DHCP and non-autoritive recursive DNS resolver

dnsmasq_enable="YES"



# Explicitly disable the memory-hungry alternatives

dhcpd_enable="NO"

dhcpd_flags="-q"

named_enable="NO"

named_chrootdir=""

named_auto_forward="YES"



# WL Captive Portal and WL Web Config Overview

thttpd_enable="YES"

http302_enable="YES"



# Hybrid setup, requires outgoing VPN Server

openvpn_enable="NO"

openvpn_if="tap"

openvpn_configfile="/usr/local/etc/openvpn/client.conf"



# Enable the firewall by default

pf_enable="YES"

pf_rules="/etc/pf.open.conf"

pf_flags=''

# Used with Proxy Configuration

#pf_rules="/etc/pf.proxy.conf"

#pf_flags="-D ext_if=vr0 -D int_if=vr1 -D publicnat={80,443}"

# Used with Node Configuration 

#pf_rules="/etc/pf.node.conf"

#pf_flags="-D captive_portal_interfaces=wlan0,wlan1"

# Used with Hybrid Configuration

#pf_rules="/etc/pf.hybrid.conf"

#pf_flags="-D ext_if=vr0 -D captive_portal_interfaces=wlan0 -D publicnat=80,443"





# Autogenerated flags are used during runtime

rc_conf_running='/etc/rc.conf.running'

if [ -r $rc_conf_running ]; then

  . $rc_conf_running

else

  : > $rc_conf_running

fi