Re: firewall config (CTFM)

2002-01-28 Thread Justin White
On Monday, January 28, 2002, at 02:44 , David Raistrick wrote: > >>> no, the user _should_ making a point to see that configuration file. >>> if >>> they're changing /etc/rc.conf, they should be reading the >>> corresponding >>> defaults file. if they're changing /etc/rc.conf without previousl

Re: firewall config (CTFM)

2002-01-28 Thread Justin White
On Monday, January 28, 2002, at 12:19 , Nate Williams wrote: >> i'm not trying to be mean, but if you don't read the docs > > A comment in a configuration file that the user should never have to see > is considered documentation? no, the user _should_ making a point to see that configuration fi

Summary: Problems and Proposals of firewall_enable (was: Re: firewall config (CTFM))

2002-01-28 Thread Siegbert Baude
Hello folks, thanks to Ceri, Erik, Richard and Warner, who made the points, I'm repeating here with a slight addition of mine. In media res: comparing defaults/rc.conf and "man rc.conf": defaults/rc.conf: firewall_enable="NO" # Set to YES to enable firewall functionality man rc.conf: firewa

RE: firewall config (CTFM)

2002-01-28 Thread Nate Williams
> > Also, even *I* can't find answers to my questions with 30 minutes, and I > > know where to look, so I find you statement, well, to be brutally > > honest, both humerous and a little bit egotistical. : > > man rc.conf: > > firewall_enable >(bool) Set to ``NO'' if you

RE: firewall config (CTFM)

2002-01-28 Thread Richard Glidden
On Mon, 28 Jan 2002, Nate Williams wrote: > Also, even *I* can't find answers to my questions with 30 minutes, and I > know where to look, so I find you statement, well, to be brutally > honest, both humerous and a little bit egotistical. : man rc.conf: firewall_enable

Re: firewall config (CTFM)

2002-01-28 Thread Nate Williams
> Could you please explain how the following makes sense? > > 1) I enable ipfw in my kernel > 2) I do not configure it to allow by default > 3) I reboot with firewall_enable="NO" > 4) The firewall defaults to allow > > If I set the default in my kernel config to deny, the

Re: firewall config (CTFM)

2002-01-28 Thread Chad David
On Mon, Jan 28, 2002 at 11:51:49AM -0800, Patrick Greenwell wrote: > On Mon, 28 Jan 2002, Robert D. Hughes wrote: > > > While this will probably get me flamed to no end, users not reading the > > docs and keeping up with advisories (sys admins are users too) is only > > the cause of little things

re: firewall config (CTFM)

2002-01-28 Thread Patrick Greenwell
Note: This was my last post on this issue as I find myself merely repeating points that I've already made.(a cheer goes up from the crowd...) On Mon, 28 Jan 2002, Justin White wrote: > instead of changing the way the system works, let's change the > documentation. new people _should_ be reading

RE: firewall config (CTFM)

2002-01-28 Thread Patrick Greenwell
On Mon, 28 Jan 2002, Robert D. Hughes wrote: > While this will probably get me flamed to no end, users not reading the > docs and keeping up with advisories (sys admins are users too) is only > the cause of little things like nimda, code red, and probably at least > 90% of all the other problems

Re: firewall config (CTFM)

2002-01-28 Thread David Raistrick
> > no, the user _should_ making a point to see that configuration file. if > > they're changing /etc/rc.conf, they should be reading the corresponding > > defaults file. if they're changing /etc/rc.conf without previously > > reading the defaults file, too bad. I have to definitely disagree