From nobody@FreeBSD.org  Fri Jun 23 00:50:12 2006
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C235816A6EA
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 23 Jun 2006 00:50:12 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [216.136.204.117])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 64E114527F
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 23 Jun 2006 00:16:05 +0000 (GMT)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.13.1/8.13.1) with ESMTP id k5N0G5M4067757
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 23 Jun 2006 00:16:05 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.13.1/8.13.1/Submit) id k5N0G5kh067756;
	Fri, 23 Jun 2006 00:16:05 GMT
	(envelope-from nobody)
Message-Id: <200606230016.k5N0G5kh067756@www.freebsd.org>
Date: Fri, 23 Jun 2006 00:16:05 GMT
From: Merijn Verstraaten <merijn.verstraaten@xs4all.nl>
To: freebsd-gnats-submit@FreeBSD.org
Subject: Unclear handbook wording
X-Send-Pr-Version: www-2.3

>Number:         99336
>Category:       docs
>Synopsis:       Unclear handbook wording about firewall_enable
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    trhodes
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jun 23 00:50:23 GMT 2006
>Closed-Date:    Tue Oct 10 02:59:53 GMT 2006
>Last-Modified:  Tue Oct 10 02:59:53 GMT 2006
>Originator:     Merijn Verstraaten
>Release:        FreeBSD-6.1
>Organization:
>Environment:
>Description:
Firewall chapter, IPFW configuration (26.6)

"If you do not have IPFW compiled into your kernel you will need to load
it with the following statement in your /etc/rc.conf:

firewall_enable="YES""

It's not clear that while IPFW will start fine without firewall_enable="YES"
in rc.conf if you have it compiled into your kernel, the rules script
provided with firewall_script won't run if firewall_enable="YES" isn't set.
>How-To-Repeat:

>Fix:

>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-www->freebsd-doc 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Fri Jun 23 02:06:41 UTC 2006 
Responsible-Changed-Why:  
This is actually a 'docs' PR; 'www' is for things that only appear on the 
website.  

http://www.freebsd.org/cgi/query-pr.cgi?pr=99336 

From: Giorgos Keramidas <keramida@freebsd.org>
To: Merijn Verstraaten <merijn.verstraaten@xs4all.nl>
Cc: bug-followup@freebsd.org
Subject: Re: docs/99336: Unclear handbook wording
Date: Fri, 23 Jun 2006 15:41:16 +0300

 On 2006-06-23 00:16, Merijn Verstraaten <merijn.verstraaten@xs4all.nl> wrote:
 > Firewall chapter, IPFW configuration (26.6)
 >
 > "If you do not have IPFW compiled into your kernel you will need to
 > load it with the following statement in your /etc/rc.conf:
 >
 > firewall_enable="YES""
 >
 > It's not clear that while IPFW will start fine without
 > firewall_enable="YES" in rc.conf if you have it compiled into your
 > kernel, the rules script provided with firewall_script won't run if
 > firewall_enable="YES" isn't set.
 
 Hmmm, well the text is unclear.  It doesn't matter if you compile `IPFW'
 support into your kernel or not these days.  The /etc/rc.d/ipfw script
 will take care of loading the module automatically.
 
 Even `DUMMYNET' can be loaded as a module in FreeBSD 7.0-CURRENT now.
 
 Can someone from the freebsd-doc people who has access to a STABLE
 system check if auto-loading of ipfw.ko and dummynet.ko modules works as
 expected in FreeBSD 6.X too?  Then we should remove this confusing part
 about ``having IPFW compiled into your kernel''.
 
 - Giorgos
 
State-Changed-From-To: open->closed 
State-Changed-By: trhodes 
State-Changed-When: Tue Oct 10 02:58:26 UTC 2006 
State-Changed-Why:  
The text has been removed and replaced with information on how 
to load the firewall.  Thanks for the submission, and Giorgos 
for the follow up (yes, 6.X works like that Mr. Keramidas). 


Responsible-Changed-From-To: freebsd-doc->trhodes 
Responsible-Changed-By: trhodes 
Responsible-Changed-When: Tue Oct 10 02:58:26 UTC 2006 
Responsible-Changed-Why:  
Over to me. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=99336 
>Unformatted:
