Return to rc.conf CVS log

Up to [local] / src / etc

Nuke net.inet6.icmp6.rediraccept and allow redirects on interfaces
with autoconf enabled.
If one is doing SLAAC one does already trust link local icmp6 so the
policy for icmp6 redirects should be the same.
pointed out by & OK bluhm@; OK henning@

#	$OpenBSD: rc.conf,v 1.198 2014/08/27 14:04:15 florian Exp $

# DO NOT EDIT THIS FILE!!
#
# This file defines the default service selection as shipped in a
# release.  Upgrades of your system will modify this file.
#
# To select the service options you desire, please override these
# options in the file /etc/rc.conf.local
#
# DO NOT EDIT THIS FILE!!

# set these to "NO" to turn them off.  otherwise, they're used as flags
ldpd_flags=NO		# for normal use: ""
ripd_flags=NO		# for normal use: ""
mrouted_flags=NO	# for normal use: "", if activated
			# be sure to enable multicast_router below.
dvmrpd_flags=NO		# for normal use: ""
ospfd_flags=NO		# for normal use: ""
ospf6d_flags=NO		# for normal use: ""
bgpd_flags=NO		# for normal use: ""
rarpd_flags=NO		# for normal use: "-a"
bootparamd_flags=NO	# for normal use: ""
rbootd_flags=NO		# for normal use: ""
sshd_flags=		# for normal use: ""
nsd_flags=NO		# for normal use: "-c /var/nsd/etc/nsd.conf"
unbound_flags=NO	# for normal use: "-c /var/unbound/etc/unbound.conf"
ldattach_flags=NO	# for normal use: "[options] linedisc cua-device"
ntpd_flags=NO		# for normal use: ""
isakmpd_flags=NO	# for normal use: ""
iked_flags=NO		# for normal use: ""
sasyncd_flags=NO	# for normal use: ""
mopd_flags=NO		# for normal use: "-a"
apmd_flags=NO		# for normal use: ""
dhcpd_flags=NO		# for normal use: ""
dhcrelay_flags=NO	# for normal use: "-i interface [server]"
rtadvd_flags=NO		# for normal use: list of interfaces
			# be sure to set net.inet6.ip6.forwarding=1
route6d_flags=NO	# for normal use: ""
			# be sure to set net.inet6.ip6.forwarding=1
rtsold_flags=NO		# for normal use: interface
			# be sure to set net.inet6.ip6.forwarding=0
lpd_flags=NO		# for normal use: "" (or "-l" for debugging)
sensorsd_flags=NO	# for normal use: ""
hotplugd_flags=NO	# for normal use: ""
watchdogd_flags=NO	# for normal use: ""
ftpproxy_flags=NO	# for normal use: ""
hostapd_flags=NO	# for normal use: ""
httpd_flags=NO		# for normal use: ""
ifstated_flags=NO	# for normal use: ""
relayd_flags=NO		# for normal use: ""
snmpd_flags=NO		# for normal use: ""
smtpd_flags=		# for normal use: ""
sndiod_flags=		# for normal use: ""
ldapd_flags=NO		# for normal use: ""
npppd_flags=NO		# for normal use: ""
inetd_flags=NO		# for normal use: ""
portmap_flags=NO	# for normal use: ""
			# Note: inetd(8) rpc services need portmap too
amd_flags=NO		# for normal use: "" and see amd_master below
tftpd_flags=NO		# for normal use: "[chroot dir]"
tftpproxy_flags=NO	# for normal use: ""
ldomd_flags=NO		# for normal use: ""
identd_flags=NO		# for normal use: "-e"
cron_flags=		# for normal use: ""
iscsid_flags=NO		# for normal use: ""

slowcgi_flags=NO	# for normal use: ""

# For normal use: "-L sm-mta -bd -q30m", and note there is a cron job
sendmail_flags=NO
spamd_flags=NO		# for normal use: "" and see spamd(8)
spamd_black=NO		# set to YES to run spamd without greylisting
spamlogd_flags=		# use eg. "-i interface" and see spamlogd(8)

# Set to NO if ftpd is running out of inetd
ftpd_flags=NO		# for non-inetd use: ""

# On some architectures, you must also disable console getty in /etc/ttys
xdm_flags=NO		# for normal use: ""

# For enabling console mouse support (i386 alpha amd64)
wsmoused_flags=NO	# for ps/2 or usb mice: "", serial: "-p /dev/cua00"

# set the following to "YES" to turn them on
pf=YES			# Packet filter / NAT
ipsec=NO		# IPsec
check_quotas=YES	# NO may be desirable in some YP environments
accounting=NO		# process accounting (using /var/account/acct)

# Multicast routing configuration
# Please look at netstart(8) for a detailed description if you change these
multicast_host=NO	# Route all multicast packets to a single interface
multicast_router=NO	# A multicast routing daemon will be run, e.g. mrouted

# miscellaneous other flags
savecore_flags=			# "-z" to compress
ypbind_flags=NO			# for normal use: ""
ypserv_flags=NO			# add more flags, eg. -1 for YP v1, -d for DNS etc
ypldap_flags=NO			# for normal use: ""
yppasswdd_flags=NO		# "-d /etc/yp" if passwd files are in /etc/yp
nfsd_flags=NO			# for normal use: "-tun 4" and see nfsd(8)
mountd_flags=NO			# for normal use: ""
lockd_flags=NO			# for normal use: ""
statd_flags=NO			# for normal use: ""
amd_master=/etc/amd/master	# AMD 'master' map
syslogd_flags=			# add more flags, e.g. "-u -a /chroot/dev/log"
pf_rules=/etc/pf.conf		# Packet filter rules file
ipsec_rules=/etc/ipsec.conf	# IPsec rules file
pflogd_flags=			# add more flags, e.g. "-s 256"
shlib_dirs=			# extra directories for ldconfig, separated
				# by space

# rc.d(8) packages scripts
# started in the specified order and stopped in reverse order
pkg_scripts=