Hi all,

> Am 18.06.2019 um 13:54 schrieb Robert Huff <roberth...@rcn.com>:
> 
>       If this is true - haven't checked personally - then it's a bug.
> (And a non-trivial one, the fact you're the first to report it
> notwithstanding.)
>       Can you please open a bug report?

I doubt it would qualify as a bug - possibly a bug in the docs, yes.

Because the observed behaviour is definitely intentional. The flow of 
statements in rc.firewall is:

0.      flush all rules
1.      setup_loopback
2.      setup_ipv6_mandatory

and no configuration is going to skip that - hence the only way is to use
firewall_script. Then it goes on:

3.      is firewall_type one of the predefined „open“, „simple“, etc.? —> 
configure accordingly
4.      if not and firewall_type points to a readable file, suck in rules from 
there

So, yes, there will always be mandatory IPv6 rules in place. That’s why
they are called mandatory, I figure ;-)

Kind regards,
Patrick
-- 
punkt.de GmbH                   Internet - Dienstleistungen - Beratung
Kaiserallee 13a                 Tel.: 0721 9109-0 Fax: -100
76133 Karlsruhe                 i...@punkt.de   http://punkt.de
AG Mannheim 108285              Gf: Juergen Egeling

_______________________________________________
freebsd-net@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to