en Copyright 2015 Java http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#cc1e4aae5a67a20f3c0fff13612364e6e4404f93 rc.d/ipfilter: ipfilter must be enabled for options to takeipfilter options are erased and reset to default when ipfilter isdisabled. This results in nullifying options from rc.conf that werepreviously set.8d6feaaaa26f, which added this code, was incorrect as it was for a bug inipfilter 4.2.28 and no longer applies to ipfilter 5.1.2.Fixes: 8d6feaaaa26fMFC after: 1 day List of files: /freebsd/libexec/rc/rc.d/ipfilter Wed, 10 Dec 2025 00:42:07 +0100 Cy Schubert <cy@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#f04b23ce3547c238dcd52d4fa1a7d401ad38d1b1 rc.d/{ipfilter,ippool}: Fix typo in variable nameMFC after: 1 day List of files: /freebsd/libexec/rc/rc.d/ipfilter Tue, 09 Dec 2025 21:32:24 +0100 Cy Schubert <cy@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#8d6feaaaa26f444abb209360e52b993e39cb81bb ipfilter: Set ipf -T optionlist at bootThere is no easy way to set ipfilter optionlist variables during boot.Add plumbing to the rc script to support this.PR: 130555Reviewed by: jlduranMFC 1 weekDifferential Revision: https://reviews.freebsd.org/D47346 List of files: /freebsd/libexec/rc/rc.d/ipfilter Wed, 30 Oct 2024 20:28:31 +0100 Cy Schubert <cy@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#f99f0ee14e3af81c23150a6a340259ca8a33d01a rc.d: add a service jails config to all base system servicesThis gives more permissions to services (e.g. network access toservices which require this) when they are started as an automaticservice jail.The sshd patch is important for the sshd-related functionality asdescribed in the man-page in the service jails part.The location of the added env vars is supposed to allow overriding themin rc.conf, and to hard-disable the use of svcj for some parts where itdoesn't make sense or will not work.Only a subset of all of the services are fully tested (I'm running thissince more than a year with various services started as service jails).The untested parts should be most of the time ok, in some edge-casesmore permissions are needed inside the service jail.Differential Revision: https://reviews.freebsd.org/D40371 List of files: /freebsd/libexec/rc/rc.d/ipfilter Wed, 22 May 2024 15:31:47 +0200 Alexander Leidinger <netchild@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd/libexec/rc/rc.d/ipfilter Wed, 16 Aug 2023 19:55:03 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#e2ad10e84792e8dcfb0e03a9b5cb19cd3d93ddf8 Remove the redundant ipfilter IPv6 rc rules load.As of ipfilter 5.1.2 the IPv4 and IPv6 rules tables have been merged.The ipf(8) -6 option has been a NOP since then. Currently the additionalipf -6 load statement in rc.d/ipfilter simply added the second ipfilterrules file to the table already populated by the previous ipf command.Plenty of time has passed since ipfilter 5.1.2 was imported. It is time toremove the option from rc.conf and the rc script.Differential Revision: https://reviews.freebsd.org/D28615 List of files: /freebsd/libexec/rc/rc.d/ipfilter Fri, 12 Feb 2021 16:17:32 +0100 Cy Schubert <cy@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#de6fc2e39bc1d88511b62ed3a6834a6f0cd6b3a4 Merge ^/head r364082 through r364250. List of files: /freebsd/libexec/rc/rc.d/ipfilter Sat, 15 Aug 2020 13:49:31 +0200 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#440cec3faf778469b36b998bb52aab7fbc43eae3 MFHSponsored by: Rubicon Communications, LLC (netgate.com) List of files: /freebsd/libexec/rc/rc.d/ipfilter Wed, 12 Aug 2020 19:16:26 +0200 Glen Barber <gjb@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#51da4b19be15e6c1862e40565d7a3b310c566679 When booting a system with WITHOUT_IPFILTER the following errorsare encountered at boot time:rcorder: requirement `ipfs' in file `/etc/rc.d/netif' has no providers.rcorder: requirement `ipfilter' in file `/etc/rc.d/netif' has noproviders.rcorder: requirement `ipfilter' in file `/etc/rc.d/netwait' has noproviders.rcorder: requirement `ipfilter' in file `/etc/rc.d/net_watchdog' has noproviders.rcorder: requirement `ipfilter' in file `/etc/rc.d/securelevel' has noproviders.Listing its own requrements in BEFORE rather than use REQUIRE ofnon-optional scripts resolves this issue.The issue was discovered and patched by glebius at Netflix.Submitted by: glebiusReported by: glebiusMFC after: 1 week List of files: /freebsd/libexec/rc/rc.d/ipfilter Wed, 12 Aug 2020 01:36:38 +0200 Cy Schubert <cy@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#c7aa572cacdeca83c35c12a378909d0b659300a9 MFHSponsored by: Rubicon Communications, LLC (netgate.com) List of files: /freebsd/libexec/rc/rc.d/ipfilter Fri, 31 Jul 2020 21:37:45 +0200 Glen Barber <gjb@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#795be686d8c4cbacd2c78a773b1bf2a98dfa61f3 Load ipfilter, ipnat, and ippool rules, and start ipmon in a vnet jail.PR: 248109Reported by: joeb1@a1poweruser.comMFC after: 2 weeks List of files: /freebsd/libexec/rc/rc.d/ipfilter Thu, 23 Jul 2020 19:39:45 +0200 Cy Schubert <cy@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#c6879c6c14eedbd060ba588a3129a6c60ebbe783 Merge ^/head r339015 through r339669. List of files: /freebsd/libexec/rc/rc.d/ipfilter Tue, 23 Oct 2018 23:09:37 +0200 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipfilter#0696600c41600d80bcd993bfd8e675d0ae6951fe Move the rc framework out of sbin/init into libexec/rc.The reasons for this are forward looking to pkgbase: * /sbin/init is a special binary; try not to replace it with every package update because an rc script was touched. (a follow-up commit will make init its own package) * having rc in its own place will allow more easy replacement of the rc framework with alternatives, such as openrc.Discussed with: brd (during BSDCam), kmooreRequested by: cem, bzPR: 231522Approved by: re (gjb) List of files: /freebsd/libexec/rc/rc.d/ipfilter Wed, 17 Oct 2018 18:49:11 +0200 Bjoern A. Zeeb <bz@FreeBSD.org>