1.\" Copyright (c) 1995 2.\" Jordan K. Hubbard 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND 14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 16.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE 17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23.\" SUCH DAMAGE. 24.\" 25.\" $FreeBSD$ 26.\" 27.Dd June 8, 2016 28.Dt RC.CONF 5 29.Os 30.Sh NAME 31.Nm rc.conf 32.Nd system configuration information 33.Sh DESCRIPTION 34The file 35.Nm 36contains descriptive information about the local host name, configuration 37details for any potential network interfaces and which services should be 38started up at system initial boot time. 39In new installations, the 40.Nm 41file is generally initialized by the system installation utility. 42.Pp 43The purpose of 44.Nm 45is not to run commands or perform system startup actions 46directly. 47Instead, it is included by the 48various generic startup scripts in 49.Pa /etc 50which conditionalize their 51internal actions according to the settings found there. 52.Pp 53The 54.Pa /etc/rc.conf 55file is included from the file 56.Pa /etc/defaults/rc.conf , 57which specifies the default settings for all the available options. 58Options need only be specified in 59.Pa /etc/rc.conf 60when the system administrator wishes to override these defaults. 61The file 62.Pa /etc/rc.conf.local 63is used to override settings in 64.Pa /etc/rc.conf 65for historical reasons. 66.Pp 67In addition to 68.Pa /etc/rc.conf.local 69you can also place smaller configuration files for each 70.Xr rc 8 71script in the 72.Pa /etc/rc.conf.d 73directory or 74.Ao Ar dir Ac Ns Pa /rc.conf.d 75directories specified in 76.Va local_startup , 77which will be included by the 78.Va load_rc_config 79function. 80For jail configurations you could use the file 81.Pa /etc/rc.conf.d/jail 82to store jail specific configuration options. 83If 84.Va local_startup 85contains 86.Pa /usr/local/etc/rc.d 87and 88.Pa /opt/conf , 89.Pa /usr/local/rc.conf.d/jail 90and 91.Pa /opt/conf/rc.conf.d/jail 92will be loaded. 93If 94.Ao Ar dir Ac Ns Pa /rc.conf.d/ Ns Ao Ar name Ac 95is a directory, 96all of files in the directory will be loaded. 97Also see the 98.Va rc_conf_files 99variable below. 100.Pp 101Options are set with 102.Dq Ar name Ns Li = Ns Ar value 103assignments that use 104.Xr sh 1 105syntax. 106The following list provides a name and short description for each 107variable that can be set in the 108.Nm 109file: 110.Bl -tag -width indent-two 111.It Va rc_debug 112.Pq Vt bool 113If set to 114.Dq Li YES , 115enable output of debug messages from rc scripts. 116This variable can be helpful in diagnosing mistakes when 117editing or integrating new scripts. 118Beware that this produces copious output to the terminal and 119.Xr syslog 3 . 120.It Va rc_info 121.Pq Vt bool 122If set to 123.Dq Li NO , 124disable informational messages from the rc scripts. 125Informational messages are displayed when 126a condition that is not serious enough to warrant a warning or 127an error occurs. 128.It Va rc_startmsgs 129.Pq Vt bool 130If set to 131.Dq Li YES , 132show 133.Dq Starting foo: 134when faststart is used (e.g., at boot time). 135.It Va early_late_divider 136.Pq Vt str 137The name of the script that should be used as the 138delimiter between the 139.Dq early 140and 141.Dq late 142stages of the boot process. 143The early stage should contain all the services needed to 144get the disks (local or remote) mounted so that the late 145stage can include scripts contained in the directories 146listed in the 147.Va local_startup 148variable (see below). 149Thus, the two likely candidates for this value are 150.Pa mountcritlocal 151for the typical system, and 152.Pa mountcritremote 153if the system needs remote file 154systems mounted to get access to the 155.Va local_startup 156directories; for example when 157.Pa /usr/local 158is NFS mounted. 159For 160.Pa rc.conf 161within a 162.Xr jail 8 163.Pa NETWORKING 164is likely to be an appropriate value. 165Extreme care should be taken when changing this value, 166and before changing it one should ensure that there are 167adequate provisions to recover from a failed boot 168(such as physical contact with the machine, 169or reliable remote console access). 170.It Va always_force_depends 171.Pq Vt bool 172Various 173.Pa rc.d 174scripts use the force_depend function to check whether required 175services are already running, and to start them if necessary. 176By default during boot time this check is bypassed if the 177required service is enabled in 178.Pa /etc/rc.conf[.local] . 179Setting this option will bypass that check at boot time and 180always test whether or not the service is actually running. 181Enabling this option is likely to increase your boot time if 182services are enabled that utilize the force_depend check. 183.It Ao Ar name Ac Ns Va _chroot 184.Pq Vt str 185.Xr chroot 186to this directory before running the service. 187.It Ao Ar name Ac Ns Va _user 188.Pq Vt str 189Run the service under this user account. 190.It Ao Ar name Ac Ns Va _group 191.Pq Vt str 192Run the chrooted service under this system group. 193Unlike the _user 194setting, this setting has no effect if the service is not chrooted. 195.It Ao Ar name Ac Ns Va _fib 196.Pq Vt int 197The 198.Xr setfib 1 199value to run the service under. 200.It Ao Ar name Ac Ns Va _nice 201.Pq Vt int 202The 203.Xr nice 1 204value to run the service under. 205.It Va apm_enable 206.Pq Vt bool 207If set to 208.Dq Li YES , 209enable support for Automatic Power Management with 210the 211.Xr apm 8 212command. 213.It Va apmd_enable 214.Pq Vt bool 215Run 216.Xr apmd 8 217to handle APM event from userland. 218This also enables support for APM. 219.It Va apmd_flags 220.Pq Vt str 221If 222.Va apmd_enable 223is set to 224.Dq Li YES , 225these are the flags to pass to the 226.Xr apmd 8 227daemon. 228.It Va devd_enable 229.Pq Vt bool 230Run 231.Xr devd 8 232to handle device added, removed or unknown events from the kernel. 233.It Va ddb_enable 234.Pq Vt bool 235Run 236.Xr ddb 8 237to install 238.Xr ddb 4 239scripts at boot time. 240.It Va ddb_config 241.Pq Vt str 242Configuration file for 243.Xr ddb 8 . 244Default 245.Pa /etc/ddb.conf . 246.It Va kld_list 247.Pq Vt str 248A list of kernel modules to load right after the local 249disks are mounted. 250Loading modules at this point in the boot process is 251much faster than doing it via 252.Pa /boot/loader.conf 253for those modules not necessary for mounting local disk. 254.It Va kldxref_enable 255.Pq Vt bool 256Set to 257.Dq Li NO 258by default. 259Set to 260.Dq Li YES 261to automatically rebuild 262.Pa linker.hints 263files with 264.Xr kldxref 8 265at boot time. 266.It Va kldxref_clobber 267.Pq Vt bool 268Set to 269.Dq Li NO 270by default. 271If 272.Va kldxref_enable 273is true, 274setting to 275.Dq Li YES 276will overwrite existing 277.Pa linker.hints 278files at boot time. 279Otherwise, 280only missing 281.Pa linker.hints 282files are generated. 283.It Va kldxref_module_path 284.Pq Vt str 285Empty by default. 286A semi-colon 287.Pq Ql \&; 288delimited list of paths containing 289.Xr kld 4 290modules. 291If empty, 292the contents of the 293.Va kern.module_path 294.Xr sysctl 8 295are used. 296.It Va powerd_enable 297.Pq Vt bool 298If set to 299.Dq Li YES , 300enable the system power control facility with the 301.Xr powerd 8 302daemon. 303.It Va powerd_flags 304.Pq Vt str 305If 306.Va powerd_enable 307is set to 308.Dq Li YES , 309these are the flags to pass to the 310.Xr powerd 8 311daemon. 312.It Va tmpmfs 313Controls the creation of a 314.Pa /tmp 315memory file system. 316Always happens if set to 317.Dq Li YES 318and never happens if set to 319.Dq Li NO . 320If set to anything else, a memory file system is created if 321.Pa /tmp 322is not writable. 323.It Va tmpsize 324Controls the size of a created 325.Pa /tmp 326memory file system. 327.It Va tmpmfs_flags 328Extra options passed to the 329.Xr mdmfs 8 330utility when the memory file system for 331.Pa /tmp 332is created. 333The default is 334.Dq Li "-S" , 335which inhibits the use of softupdates on 336.Pa /tmp 337so that file system space is freed without delay 338after file truncation or deletion. 339See 340.Xr mdmfs 8 341for other options you can use in 342.Va tmpmfs_flags . 343.It Va varmfs 344Controls the creation of a 345.Pa /var 346memory file system. 347Always happens if set to 348.Dq Li YES 349and never happens if set to 350.Dq Li NO . 351If set to anything else, a memory file system is created if 352.Pa /var 353is not writable. 354.It Va varsize 355Controls the size of a created 356.Pa /var 357memory file system. 358.It Va varmfs_flags 359Extra options passed to the 360.Xr mdmfs 8 361utility when the memory file system for 362.Pa /var 363is created. 364The default is 365.Dq Li "-S" , 366which inhibits the use of softupdates on 367.Pa /var 368so that file system space is freed without delay 369after file truncation or deletion. 370See 371.Xr mdmfs 8 372for other options you can use in 373.Va varmfs_flags . 374.It Va populate_var 375Controls the automatic population of the 376.Pa /var 377file system. 378Always happens if set to 379.Dq Li YES 380and never happens if set to 381.Dq Li NO . 382If set to anything else, a memory file system is created if 383.Pa /var 384is not writable. 385Note that this process requires access to certain commands in 386.Pa /usr 387before 388.Pa /usr 389is mounted on normal systems. 390.It Va cleanvar_enable 391.Pq Vt bool 392Clean the 393.Pa /var 394directory. 395.It Va local_startup 396.Pq Vt str 397List of directories to search for startup script files. 398.It Va script_name_sep 399.Pq Vt str 400The field separator to use for breaking down the list of startup script files 401into individual filenames. 402The default is a space. 403It is not necessary to change this unless there are startup scripts with names 404containing spaces. 405.It Va hostapd_enable 406.Pq Vt bool 407Set to 408.Dq Li YES 409to start 410.Xr hostapd 8 411at system boot time. 412.It Va hostname 413.Pq Vt str 414The fully qualified domain name (FQDN) of this host on the network. 415This should almost certainly be set to something meaningful, even if 416there is no network connection. 417If 418.Xr dhclient 8 419is used to set the hostname via DHCP, 420this variable should be set to an empty string. 421If this value remains unset when the system is done booting 422your console login will display the default hostname of 423.Dq Amnesiac . 424.It Va nisdomainname 425.Pq Vt str 426The NIS domain name of this host, or 427.Dq Li NO 428if NIS is not used. 429.It Va dhclient_program 430.Pq Vt str 431Path to the DHCP client program 432.Pa ( /sbin/dhclient , 433the 434.Ox 435DHCP client, 436is the default). 437.It Va dhclient_flags 438.Pq Vt str 439Additional flags to pass to the DHCP client program. 440For the 441.Ox 442DHCP client, see the 443.Xr dhclient 8 444manpage for a description of the command line options available. 445.It Va dhclient_flags_ Ns Aq Ar iface 446Additional flags to pass to the DHCP client program running on 447.Ar iface 448only. 449When specified, this variable overrides 450.Va dhclient_flags . 451.It Va background_dhclient 452.Pq Vt bool 453Set to 454.Dq Li YES 455to start the DHCP client in background. 456This can cause trouble with applications depending on 457a working network, but it will provide a faster startup 458in many cases. 459.It Va background_dhclient_ Ns Aq Ar iface 460When specified, this variable overrides the 461.Va background_dhclient 462variable for interface 463.Ar iface 464only. 465.It Va synchronous_dhclient 466.Pq Vt bool 467Set to 468.Dq Li YES 469to start 470.Xr dhclient 8 471synchronously at startup. 472This behavior can be overridden on a per-interface basis by replacing 473the 474.Dq Li DHCP 475keyword in the 476.Va ifconfig_ Ns Aq Ar interface 477variable with 478.Dq Li SYNCDHCP 479or 480.Dq Li NOSYNCDHCP . 481.It Va defaultroute_delay 482.Pq Vt int 483When set to a positive value, wait up to this long after configuring 484DHCP interfaces at startup to give the interfaces time to receive a lease. 485.It Va firewall_enable 486.Pq Vt bool 487Set to 488.Dq Li YES 489to load firewall rules at startup. 490If the kernel was not built with 491.Cd "options IPFIREWALL" , 492the 493.Pa ipfw.ko 494kernel module will be loaded. 495See also 496.Va ipfilter_enable . 497.It Va firewall_script 498.Pq Vt str 499This variable specifies the full path to the firewall script to run. 500The default is 501.Pa /etc/rc.firewall . 502.It Va firewall_type 503.Pq Vt str 504Names the firewall type from the selection in 505.Pa /etc/rc.firewall , 506or the file which contains the local firewall ruleset. 507Valid selections from 508.Pa /etc/rc.firewall 509are: 510.Pp 511.Bl -tag -width ".Li simple" -compact 512.It Li open 513unrestricted IP access 514.It Li closed 515all IP services disabled, except via 516.Dq Li lo0 517.It Li client 518basic protection for a workstation 519.It Li simple 520basic protection for a LAN. 521.El 522.Pp 523If a filename is specified, the full path 524must be given. 525.It Va firewall_quiet 526.Pq Vt bool 527Set to 528.Dq Li YES 529to disable the display of firewall rules on the console during boot. 530.It Va firewall_logging 531.Pq Vt bool 532Set to 533.Dq Li YES 534to enable firewall event logging. 535This is equivalent to the 536.Dv IPFIREWALL_VERBOSE 537kernel option. 538.It Va firewall_logif 539.Pq Vt bool 540Set to 541.Dq Li YES 542to create pseudo interface 543.Li ipfw0 544for logging. 545For more details, see 546.Xr ipfw 8 547manual page. 548.It Va firewall_flags 549.Pq Vt str 550Flags passed to 551.Xr ipfw 8 552if 553.Va firewall_type 554specifies a filename. 555.It Va firewall_coscripts 556.Pq Vt str 557List of executables and/or rc scripts to run after firewall starts/stops. 558Default is empty. 559.\" ----- firewall_nat_enable setting -------------------------------- 560.It Va firewall_nat_enable 561.Pq Vt bool 562The 563.Xr ipfw 8 564equivalent of 565.Va natd_enable . 566Setting this to 567.Dq Li YES 568enables kernel NAT. 569.Va firewall_enable 570must also be set to 571.Dq Li YES . 572.It Va firewall_nat_interface 573.Pq Vt str 574The 575.Xr ipfw 8 576equivalent of 577.Va natd_interface . 578This is the name of the public interface or IP address on which 579kernel NAT should run. 580.It Va firewall_nat_flags 581.Pq Vt str 582Additional configuration parameters for kernel NAT should be placed here. 583.It Va dummynet_enable 584.Pq Vt bool 585Setting this to 586.Dq Li YES 587will automatically load the 588.Xr dummynet 4 589module if 590.Va firewall_enable 591is also set to 592.Dq Li YES . 593.\" ------------------------------------------------------------------- 594.It Va natd_program 595.Pq Vt str 596Path to 597.Xr natd 8 . 598.It Va natd_enable 599.Pq Vt bool 600Set to 601.Dq Li YES 602to enable 603.Xr natd 8 . 604.Va firewall_enable 605must also be set to 606.Dq Li YES , 607and 608.Xr divert 4 609sockets must be enabled in the kernel. 610If the kernel was not built with 611.Cd "options IPDIVERT" , 612the 613.Pa ipdivert.ko 614kernel module will be loaded. 615.It Va natd_interface 616.Pq Vt str 617This is the name of the public interface on which 618.Xr natd 8 619should run. 620The interface may be given as an interface name or as an IP address. 621.It Va natd_flags 622.Pq Vt str 623Additional 624.Xr natd 8 625flags should be placed here. 626The 627.Fl n 628or 629.Fl a 630flag is automatically added with the above 631.Va natd_interface 632as an argument. 633.\" ----- ipfilter_enable setting -------------------------------- 634.It Va ipfilter_enable 635.Pq Vt bool 636Set to 637.Dq Li NO 638by default. 639Setting this to 640.Dq Li YES 641enables 642.Xr ipf 8 643packet filtering. 644.Pp 645Typical usage will require putting 646.Bd -literal 647ipfilter_enable="YES" 648ipnat_enable="YES" 649ipmon_enable="YES" 650ipfs_enable="YES" 651.Ed 652.Pp 653into 654.Pa /etc/rc.conf 655and editing 656.Pa /etc/ipf.rules 657and 658.Pa /etc/ipnat.rules 659appropriately. 660.Pp 661Note that 662.Va ipfilter_enable 663and 664.Va ipnat_enable 665can be enabled independently. 666.Va ipmon_enable 667and 668.Va ipfs_enable 669both require at least one of 670.Va ipfilter_enable 671and 672.Va ipnat_enable 673to be enabled. 674.Pp 675Having 676.Bd -literal 677options IPFILTER 678options IPFILTER_LOG 679options IPFILTER_DEFAULT_BLOCK 680.Ed 681.Pp 682in the kernel configuration file is a good idea, too. 683.\" ----- ipfilter_program setting ------------------------------ 684.It Va ipfilter_program 685.Pq Vt str 686Path to 687.Xr ipf 8 688(default 689.Pa /sbin/ipf ) . 690.\" ----- ipfilter_rules setting -------------------------------- 691.It Va ipfilter_rules 692.Pq Vt str 693Set to 694.Pa /etc/ipf.rules 695by default. 696This variable contains the name of the filter rule definition file. 697The file is expected to be readable for the 698.Xr ipf 8 699command to execute. 700.\" ----- ipv6_ipfilter_rules setting --------------------------- 701.It Va ipv6_ipfilter_rules 702.Pq Vt str 703Set to 704.Pa /etc/ipf6.rules 705by default. 706This variable contains the IPv6 filter rule definition file. 707The file is expected to be readable for the 708.Xr ipf 8 709command to execute. 710.\" ----- ipfilter_flags setting -------------------------------- 711.It Va ipfilter_flags 712.Pq Vt str 713Empty by default. 714This variable contains flags passed to the 715.Xr ipf 8 716program. 717.\" ----- ipnat_enable setting ---------------------------------- 718.It Va ipnat_enable 719.Pq Vt bool 720Set to 721.Dq Li NO 722by default. 723Set it to 724.Dq Li YES 725to enable 726.Xr ipnat 8 727network address translation. 728See 729.Va ipfilter_enable 730for a detailed discussion. 731.\" ----- ipnat_program setting --------------------------------- 732.It Va ipnat_program 733.Pq Vt str 734Path to 735.Xr ipnat 8 736(default 737.Pa /sbin/ipnat ) . 738.\" ----- ipnat_rules setting ----------------------------------- 739.It Va ipnat_rules 740.Pq Vt str 741Set to 742.Pa /etc/ipnat.rules 743by default. 744This variable contains the name of the file 745holding the network address translation definition. 746This file is expected to be readable for the 747.Xr ipnat 8 748command to execute. 749.\" ----- ipnat_flags setting ----------------------------------- 750.It Va ipnat_flags 751.Pq Vt str 752Empty by default. 753This variable contains flags passed to the 754.Xr ipnat 8 755program. 756.\" ----- ipmon_enable setting ---------------------------------- 757.It Va ipmon_enable 758.Pq Vt bool 759Set to 760.Dq Li NO 761by default. 762Set it to 763.Dq Li YES 764to enable 765.Xr ipmon 8 766monitoring (logging 767.Xr ipf 8 768and 769.Xr ipnat 8 770events). 771Setting this variable needs setting 772.Va ipfilter_enable 773or 774.Va ipnat_enable 775too. 776See 777.Va ipfilter_enable 778for a detailed discussion. 779.\" ----- ipmon_program setting --------------------------------- 780.It Va ipmon_program 781.Pq Vt str 782Path to 783.Xr ipmon 8 784(default 785.Pa /sbin/ipmon ) . 786.\" ----- ipmon_flags setting ----------------------------------- 787.It Va ipmon_flags 788.Pq Vt str 789Set to 790.Dq Li -Ds 791by default. 792This variable contains flags passed to the 793.Xr ipmon 8 794program. 795Another typical example would be 796.Dq Fl D Pa /var/log/ipflog 797to have 798.Xr ipmon 8 799log directly to a file bypassing 800.Xr syslogd 8 . 801Make sure to adjust 802.Pa /etc/newsyslog.conf 803in such case like this: 804.Bd -literal 805/var/log/ipflog 640 10 100 * Z /var/run/ipmon.pid 806.Ed 807.\" ----- ipfs_enable setting ----------------------------------- 808.It Va ipfs_enable 809.Pq Vt bool 810Set to 811.Dq Li NO 812by default. 813Set it to 814.Dq Li YES 815to enable 816.Xr ipfs 8 817saving the filter and NAT state tables during shutdown 818and reloading them during startup again. 819Setting this variable needs setting 820.Va ipfilter_enable 821or 822.Va ipnat_enable 823to 824.Dq Li YES 825too. 826See 827.Va ipfilter_enable 828for a detailed discussion. 829Note that if 830.Va kern_securelevel 831is set to 3, 832.Va ipfs_enable 833cannot be used 834because the raised securelevel will prevent 835.Xr ipfs 8 836from saving the state tables at shutdown time. 837.\" ----- ipfs_program setting ---------------------------------- 838.It Va ipfs_program 839.Pq Vt str 840Path to 841.Xr ipfs 8 842(default 843.Pa /sbin/ipfs ) . 844.\" ----- ipfs_flags setting ------------------------------------ 845.It Va ipfs_flags 846.Pq Vt str 847Empty by default. 848This variable contains flags passed to the 849.Xr ipfs 8 850program. 851.\" ----- end of added ipf hook --------------------------------- 852.It Va pf_enable 853.Pq Vt bool 854Set to 855.Dq Li NO 856by default. 857Setting this to 858.Dq Li YES 859enables 860.Xr pf 4 861packet filtering. 862.Pp 863Typical usage will require putting 864.Pp 865.Dl pf_enable="YES" 866.Pp 867into 868.Pa /etc/rc.conf 869and editing 870.Pa /etc/pf.conf 871appropriately. 872Adding 873.Pp 874.Dl "device pf" 875.Pp 876builds support for 877.Xr pf 4 878into the kernel, otherwise the 879kernel module will be loaded. 880.It Va pf_rules 881.Pq Vt str 882Path to 883.Xr pf 4 884ruleset configuration file 885(default 886.Pa /etc/pf.conf ) . 887.It Va pf_program 888.Pq Vt str 889Path to 890.Xr pfctl 8 891(default 892.Pa /sbin/pfctl ) . 893.It Va pf_flags 894.Pq Vt str 895If 896.Va pf_enable 897is set to 898.Dq Li YES , 899these flags are passed to the 900.Xr pfctl 8 901program when loading the ruleset. 902.It Va pflog_enable 903.Pq Vt bool 904Set to 905.Dq Li NO 906by default. 907Setting this to 908.Dq Li YES 909enables 910.Xr pflogd 8 911which logs packets from the 912.Xr pf 4 913packet filter. 914.It Va pflog_logfile 915.Pq Vt str 916If 917.Va pflog_enable 918is set to 919.Dq Li YES 920this controls where 921.Xr pflogd 8 922stores the logfile 923(default 924.Pa /var/log/pflog ) . 925Check 926.Pa /etc/newsyslog.conf 927to adjust logfile rotation for this. 928.It Va pflog_program 929.Pq Vt str 930Path to 931.Xr pflogd 8 932(default 933.Pa /sbin/pflogd ) . 934.It Va pflog_flags 935.Pq Vt str 936Empty by default. 937This variable contains additional flags passed to the 938.Xr pflogd 8 939program. 940.It Va pflog_instances 941.Pq Vt str 942If logging to more than one 943.Xr pflog 4 944interface is desired, 945.Va pflog_instances 946is set to the list of 947.Xr pflogd 8 948instances that should be started at system boot time. 949If 950.Va pflog_instances 951is set, for each whitespace-seperated 952.Ar element 953in the list, 954.Ao Ar element Ac Ns Va _dev 955and 956.Ao Ar element Ac Ns Va _logfile 957elements are assumed to exist. 958.Ao Ar element Ac Ns Va _dev 959must contain the 960.Xr pflog 4 961interface to be watched by the named 962.Xr pflogd 8 963instance. 964.Ao Ar element Ac Ns Va _logfile 965must contain the name of the logfile that will be used by the 966.Xr pflogd 8 967instance. 968.It Va ftpproxy_enable 969.Pq Vt bool 970Set to 971.Dq Li NO 972by default. 973Setting this to 974.Dq Li YES 975enables 976.Xr ftp-proxy 8 977which supports the 978.Xr pf 4 979packet filter in translating ftp connections. 980.It Va ftpproxy_flags 981.Pq Vt str 982Empty by default. 983This variable contains additional flags passed to the 984.Xr ftp-proxy 8 985program. 986.It Va ftpproxy_instances 987.Pq Vt str 988Empty by default. 989If multiple instances of 990.Xr ftp-proxy 8 991are desired at boot time, 992.Va ftpproxy_instances 993should contain a whitespace-seperated list of instance names. 994For each 995.Ar element 996in the list, a variable named 997.Ao Ar element Ac Ns Va _flags 998should be defined, containing the command-line flags to be passed to the 999.Xr ftp-proxy 8 1000instance. 1001.It Va pfsync_enable 1002.Pq Vt bool 1003Set to 1004.Dq Li NO 1005by default. 1006Setting this to 1007.Dq Li YES 1008enables exposing 1009.Xr pf 4 1010state changes to other hosts over the network by means of 1011.Xr pfsync 4 . 1012The 1013.Va pfsync_syncdev 1014variable 1015must also be set then. 1016.It Va pfsync_syncdev 1017.Pq Vt str 1018Empty by default. 1019This variable specifies the name of the network interface 1020.Xr pfsync 4 1021should operate through. 1022It must be set accordingly if 1023.Va pfsync_enable 1024is set to 1025.Dq Li YES . 1026.It Va pfsync_syncpeer 1027.Pq Vt str 1028Empty by default. 1029This variable is optional. 1030By default, state change messages are sent out on the synchronisation 1031interface using IP multicast packets. 1032The protocol is IP protocol 240, PFSYNC, and the multicast group used is 1033224.0.0.240. 1034When a peer address is specified using the 1035.Va pfsync_syncpeer 1036option, the peer address is used as a destination for the pfsync 1037traffic, and the traffic can then be protected using 1038.Xr ipsec 4 . 1039See the 1040.Xr pfsync 4 1041manpage for more details about using 1042.Xr ipsec 4 1043with 1044.Xr pfsync 4 1045interfaces. 1046.It Va pfsync_ifconfig 1047.Pq Vt str 1048Empty by default. 1049This variable can contain additional options to be passed to the 1050.Xr ifconfig 8 1051command used to set up 1052.Xr pfsync 4 . 1053.It Va tcp_extensions 1054.Pq Vt bool 1055Set to 1056.Dq Li YES 1057by default. 1058Setting this to 1059.Dq Li NO 1060disables certain TCP options as described by 1061.Rs 1062.%T "RFC 1323" 1063.Re 1064Setting this to 1065.Dq Li NO 1066might help remedy such problems with connections as randomly hanging 1067or other weird behavior. 1068Some network devices are known 1069to be broken with respect to these options. 1070.It Va log_in_vain 1071.Pq Vt int 1072Set to 0 by default. 1073The 1074.Xr sysctl 8 1075variables, 1076.Va net.inet.tcp.log_in_vain 1077and 1078.Va net.inet.udp.log_in_vain , 1079as described in 1080.Xr tcp 4 1081and 1082.Xr udp 4 , 1083are set to the given value. 1084.It Va tcp_keepalive 1085.Pq Vt bool 1086Set to 1087.Dq Li YES 1088by default. 1089Setting to 1090.Dq Li NO 1091will disable probing idle TCP connections to verify that the 1092peer is still up and reachable. 1093.It Va tcp_drop_synfin 1094.Pq Vt bool 1095Set to 1096.Dq Li NO 1097by default. 1098Setting to 1099.Dq Li YES 1100will cause the kernel to ignore TCP frames that have both 1101the SYN and FIN flags set. 1102This prevents OS fingerprinting, but may 1103break some legitimate applications. 1104.It Va icmp_drop_redirect 1105.Pq Vt bool 1106Set to 1107.Dq Li NO 1108by default. 1109Setting to 1110.Dq Li YES 1111will cause the kernel to ignore ICMP REDIRECT packets. 1112Refer to 1113.Xr icmp 4 1114for more information. 1115.It Va icmp_log_redirect 1116.Pq Vt bool 1117Set to 1118.Dq Li NO 1119by default. 1120Setting to 1121.Dq Li YES 1122will cause the kernel to log ICMP REDIRECT packets. 1123Note that 1124the log messages are not rate-limited, so this option should only be used 1125for troubleshooting networks. 1126Refer to 1127.Xr icmp 4 1128for more information. 1129.It Va icmp_bmcastecho 1130.Pq Vt bool 1131Set to 1132.Dq Li YES 1133to respond to broadcast or multicast ICMP ping packets. 1134Refer to 1135.Xr icmp 4 1136for more information. 1137.It Va ip_portrange_first 1138.Pq Vt int 1139If not set to 1140.Dq Li NO , 1141this is the first port in the default portrange. 1142Refer to 1143.Xr ip 4 1144for more information. 1145.It Va ip_portrange_last 1146.Pq Vt int 1147If not set to 1148.Dq Li NO , 1149this is the last port in the default portrange. 1150Refer to 1151.Xr ip 4 1152for more information. 1153.It Va network_interfaces 1154.Pq Vt str 1155Set to the list of network interfaces to configure on this host or 1156.Dq Li AUTO 1157(the default) for all current interfaces. 1158Setting the 1159.Va network_interfaces 1160variable to anything other than the default is deprecated. 1161Interfaces that the administrator wishes to store configuration for, 1162but not start at boot should be configured with the 1163.Dq Li NOAUTO 1164keyword in their 1165.Va ifconfig_ Ns Aq Ar interface 1166variables as described below. 1167.Pp 1168An 1169.Va ifconfig_ Ns Aq Ar interface 1170variable is also assumed to exist for each value of 1171.Ar interface . 1172When an interface name contains any of the characters 1173.Dq Li .-/+ 1174they are translated to 1175.Dq Li _ 1176before lookup. 1177The variable can contain arguments to 1178.Xr ifconfig 8 , 1179as well as special case-insensitive keywords described below. 1180Such keywords are removed before passing the value to 1181.Xr ifconfig 8 1182while the order of the other arguments is preserved. 1183.Pp 1184It is possible to add IP alias entries using 1185.Xr ifconfig 8 1186syntax with the address family keyword such as 1187.Li inet . 1188Assuming that the interface in question was 1189.Li ed0 , 1190it might look something like this: 1191.Bd -literal 1192ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff" 1193ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff" 1194.Ed 1195.Pp 1196It also possible to configure multiple IP addresses in Classless 1197Inter-Domain Routing 1198.Pq CIDR 1199address notation, 1200whose each address component can be a range like 1201.Li inet 192.0.2.5-23/24 1202or 1203.Li inet6 2001:db8:1-f::1/64 . 1204This notation allows address and prefix length part only, 1205not the other address modifiers. 1206Note that the maximum number of the generated addresses from a range 1207specification is limited to an integer value specified in 1208.Va netif_ipexpand_max 1209in 1210.Nm 1211because a small typo can unexpectedly generate a large number of addresses. 1212The default value is 1213.Li 2048 . 1214It can be increased by adding the following line into 1215.Nm : 1216.Bd -literal 1217netif_ipexpand_max="4096" 1218.Ed 1219.Pp 1220In the case of 1221.Li 192.0.2.5-23/24 , 1222the address 192.0.2.5 will be configured with the 1223netmask /24 and the addresses 192.0.2.6 to 192.0.2.23 with 1224the non-conflicting netmask /32 as explained in the 1225.Xr ifconfig 8 1226alias section. 1227Note that this special netmask handling is only for 1228.Li inet , 1229not for the other address families such as 1230.Li inet6 . 1231.Pp 1232With the interface in question being 1233.Li ed0 , 1234an example could look like: 1235.Bd -literal 1236ifconfig_ed0_alias2="inet 192.0.2.129/27" 1237ifconfig_ed0_alias3="inet 192.0.2.1-5/28" 1238.Ed 1239.Pp 1240and so on. 1241.Pp 1242Note that 1243.Va ipv4_addrs_ Ns Aq Ar interface 1244variable was supported for IPv4 CIDR address notation. 1245It is now deprecated because the functionality was integrated into 1246.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 1247though 1248.Va ipv4_addrs_ Ns Aq Ar interface 1249is still supported for backward compatibility. 1250.Pp 1251For each 1252.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 1253entry with an address family keyword, 1254its contents are passed to 1255.Xr ifconfig 8 . 1256Execution stops at the first unsuccessful access, so if 1257something like this is present: 1258.Bd -literal 1259ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff" 1260ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff" 1261ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff" 1262ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff" 1263.Ed 1264.Pp 1265Then note that alias4 would 1266.Em not 1267be added since the search would 1268stop with the missing 1269.Dq Li alias3 1270entry. 1271Because of this difficult to manage behavior, 1272there is 1273.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _aliases 1274variable, which has the same functionality as 1275.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 1276and can have all of entries in a variable like the following: 1277.Bd -literal 1278ifconfig_ed0_aliases="\\ 1279 inet 127.0.0.251 netmask 0xffffffff \\ 1280 inet 127.0.0.252 netmask 0xffffffff \\ 1281 inet 127.0.0.253 netmask 0xffffffff \\ 1282 inet 127.0.0.254 netmask 0xffffffff" 1283.Ed 1284.Pp 1285It also supports CIDR notation. 1286.Pp 1287If the 1288.Pa /etc/start_if. Ns Aq Ar interface 1289file is present, it is read and executed by the 1290.Xr sh 1 1291interpreter 1292before configuring the interface as specified in the 1293.Va ifconfig_ Ns Aq Ar interface 1294and 1295.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 1296variables. 1297.Pp 1298If a 1299.Va vlans_ Ns Aq Ar interface 1300variable is set, 1301a 1302.Xr vlan 4 1303interface will be created for each item in the list with the 1304.Ar vlandev 1305argument set to 1306.Ar interface . 1307If a vlan interface's name is a number, 1308then that number is used as the vlan tag and the new vlan interface is 1309named 1310.Ar interface . Ns Ar tag . 1311Otherwise, 1312the vlan tag must be specified via a 1313.Va vlan 1314parameter in the 1315.Va create_args_ Ns Aq Ar interface 1316variable. 1317.Pp 1318To create a vlan device named 1319.Li em0.101 1320on 1321.Li em0 1322with the vlan tag 101 and the optional the IPv4 address 192.0.2.1/24: 1323.Bd -literal 1324vlans_em0="101" 1325ifconfig_em0_101="inet 192.0.2.1/24" 1326.Ed 1327.Pp 1328To create a vlan device named 1329.Li myvlan 1330on 1331.Li em0 1332with the vlan tag 102: 1333.Bd -literal 1334vlans_em0="myvlan" 1335create_args_myvlan="vlan 102" 1336.Ed 1337.Pp 1338If a 1339.Va wlans_ Ns Aq Ar interface 1340variable is set, 1341an 1342.Xr wlan 4 1343interface will be created for each item in the list with the 1344.Ar wlandev 1345argument set to 1346.Ar interface . 1347Further wlan cloning arguments may be passed to the 1348.Xr ifconfig 8 1349.Cm create 1350command by setting the 1351.Va create_args_ Ns Aq Ar interface 1352variable. 1353One or more 1354.Xr wlan 4 1355devices must be created for each wireless devices as of 1356.Fx 8.0 . 1357Debugging flags for 1358.Xr wlan 4 1359devices as set by 1360.Xr wlandebug 8 1361may be specified with an 1362.Va wlandebug_ Ns Aq Ar interface 1363variable. 1364The contents of this variable will be passed directly to 1365.Xr wlandebug 8 . 1366.Pp 1367If the 1368.Va ifconfig_ Ns Aq Ar interface 1369contains the keyword 1370.Dq Li NOAUTO 1371then the interface will not be configured 1372at boot or by 1373.Pa /etc/pccard_ether 1374when 1375.Va network_interfaces 1376is set to 1377.Dq Li AUTO . 1378.Pp 1379It is possible to bring up an interface with DHCP by adding 1380.Dq Li DHCP 1381to the 1382.Va ifconfig_ Ns Aq Ar interface 1383variable. 1384For instance, to initialize the 1385.Li ed0 1386device via DHCP, 1387it is possible to use something like: 1388.Bd -literal 1389ifconfig_ed0="DHCP" 1390.Ed 1391.Pp 1392If you want to configure your wireless interface with 1393.Xr wpa_supplicant 8 1394for use with WPA, EAP/LEAP or WEP, you need to add 1395.Dq Li WPA 1396to the 1397.Va ifconfig_ Ns Aq Ar interface 1398variable. 1399.Pp 1400On the other hand, if you want to configure your wireless interface with 1401.Xr hostapd 8 , 1402you need to add 1403.Dq Li HOSTAP 1404to the 1405.Va ifconfig_ Ns Aq Ar interface 1406variable. 1407.Xr hostapd 8 1408will use the settings from 1409.Pa /etc/hostapd- Ns Ao Ar interface Ac Ns .conf 1410.Pp 1411Finally, you can add 1412.Xr ifconfig 8 1413options in this variable, in addition to the 1414.Pa /etc/start_if. Ns Aq Ar interface 1415file. 1416For instance, to configure an 1417.Xr ath 4 1418wireless device in station mode with an address obtained 1419via DHCP, using WPA authentication and 802.11b mode, it is 1420possible to use something like: 1421.Bd -literal 1422wlans_ath0="wlan0" 1423ifconfig_wlan0="DHCP WPA mode 11b" 1424.Ed 1425.Pp 1426In addition to the 1427.Va ifconfig_ Ns Aq Ar interface 1428form, a fallback variable 1429.Va ifconfig_DEFAULT 1430may be configured. 1431It will be used for all interfaces with no 1432.Va ifconfig_ Ns Aq Ar interface 1433variable. 1434This is intended to replace the no longer supported 1435.Va pccard_ifconfig 1436variable. 1437.Pp 1438It is also possible to rename an interface by doing: 1439.Bd -literal 1440ifconfig_ed0_name="net0" 1441ifconfig_net0="inet 192.0.2.1 netmask 0xffffff00" 1442.Ed 1443.It Va ipv6_enable 1444.Pq Vt bool 1445This variable is deprecated. 1446Use 1447.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1448and 1449.Va ipv6_activate_all_interfaces 1450if necessary. 1451.Pp 1452If the variable is 1453.Dq Li YES , 1454.Dq Li inet6 accept_rtadv 1455is added to all of 1456.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1457and the 1458.Va ipv6_activate_all_interfaces 1459is defined as 1460.Dq Li YES . 1461.It Va ipv6_prefer 1462.Pq Vt bool 1463This variable is deprecated. 1464Use 1465.Va ip6addrctl_policy 1466instead. 1467.Pp 1468If the variable is 1469.Dq Li YES , 1470the default address selection policy table set by 1471.Xr ip6addrctl 8 1472will be IPv6-preferred. 1473.Pp 1474If the variable is 1475.Dq Li NO , 1476the default address selection policy table set by 1477.Xr ip6addrctl 8 1478will be IPv4-preferred. 1479.It Va ipv6_activate_all_interfaces 1480.Pq Vt bool 1481This controls initial configuration on IPv6-capable 1482interfaces with no corresponding 1483.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1484variable. 1485Note that it is not always necessary to set this variable to 1486.Dq YES 1487to use IPv6 functionality on 1488.Fx . 1489In most cases, just configuring 1490.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1491variables works. 1492.Pp 1493If the variable is 1494.Dq Li NO , 1495all interfaces which do not have a corresponding 1496.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1497variable will be marked as 1498.Dq Li IFDISABLED 1499at creation. 1500This means that all of IPv6 functionality on that interface 1501is completely disabled to enforce a security policy. 1502If the variable is set to 1503.Dq YES , 1504the flag will be cleared on all of the interfaces. 1505.Pp 1506In most cases, just defining an 1507.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1508for an IPv6-capable interface should be sufficient. 1509However, if an interface is added dynamically 1510.Pq by some tunneling protocols such as PPP, for example , 1511it is often difficult to define the variable in advance. 1512In such a case, configuring the 1513.Dq Li IFDISABLED 1514flag can be disabled by setting this variable to 1515.Dq YES . 1516.Pp 1517For more details of the 1518.Dq Li IFDISABLED 1519flag and keywords 1520.Dq Li inet6 ifdisabled , 1521see 1522.Xr ifconfig 8 . 1523.Pp 1524Default is 1525.Dq Li NO . 1526.It Va ipv6_privacy 1527.Pq Vt bool 1528If the variable is 1529.Dq Li YES 1530privacy addresses will be generated for each IPv6 1531interface as described in RFC 4941. 1532.It Va ipv6_network_interfaces 1533.Pq Vt str 1534This is the IPv6 equivalent of 1535.Va network_interfaces . 1536Normally manual configuration of this variable is not needed. 1537.It Va ipv6_cpe_wanif 1538.Pq Vt str 1539If the variable is set to an interface name, 1540the 1541.Xr ifconfig 8 1542options 1543.Dq inet6 -no_radr accept_rtadv 1544will be added to the specified interface automatically before evaluating 1545.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 , 1546and two 1547.Xr sysctl 8 1548variables 1549.Va net.inet6.ip6.rfc6204w3 1550and 1551.Va net.inet6.ip6.no_radr 1552will be set to 1. 1553.Pp 1554This means the specified interface will accept ICMPv6 Router 1555Advertisement messages on that link and add the discovered 1556routers into the Default Router List. 1557While the other interfaces can still accept RA messages if the 1558.Dq inet6 accept_rtadv 1559option is specified, adding 1560routes into the Default Router List will be disabled by 1561.Dq inet6 no_radr 1562option by default. 1563See 1564.Xr ifconfig 8 1565for more details. 1566.Pp 1567Note that ICMPv6 Router Advertisement messages will be 1568accepted even when 1569.Va net.inet6.ip6.forwarding 1570is 1 1571.Pq packet forwarding is enabled 1572when 1573.Va net.inet6.ip6.rfc6204w3 1574is set to 1. 1575.Pp 1576Default is 1577.Dq Li NO . 1578.It Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1579.Pq Vt str 1580IPv6 functionality on an interface should be configured by 1581.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 , 1582instead of setting ifconfig parameters in 1583.Va ifconfig_ Ns Aq Ar interface . 1584If this variable is empty, all of IPv6 configurations on the 1585specified interface by other variables such as 1586.Va ipv6_prefix_ Ns Ao Ar interface Ac 1587will be ignored. 1588.Pp 1589Aliases should be set by 1590.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 1591with 1592.Dq Li inet6 1593keyword. 1594For example: 1595.Bd -literal 1596ifconfig_ed0_ipv6="inet6 2001:db8:1::1 prefixlen 64" 1597ifconfig_ed0_alias0="inet6 2001:db8:2::1 prefixlen 64" 1598.Ed 1599.Pp 1600Interfaces that have an 1601.Dq Li inet6 accept_rtadv 1602keyword in 1603.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1604setting will be automatically configured by SLAAC 1605.Pq StateLess Address AutoConfiguration 1606described in 1607.Rs 1608.%T "RFC 4862" 1609.Re 1610.Pp 1611Note that a link-local address will be automatically configured in 1612addition to the configured global-scope addresses because the IPv6 1613specifications require it on each link. 1614The address is calculated from the MAC address by using an algorithm 1615defined in 1616.Rs 1617.%T "RFC 4862" 1618.%O "Section 5.3" 1619.Re 1620.Pp 1621If only a link-local address is needed on the interface, 1622the following configuration can be used: 1623.Bd -literal 1624ifconfig_ed0_ipv6="inet6 auto_linklocal" 1625.Ed 1626.Pp 1627A link-local address can also be configured manually. 1628This is useful for the default router address of an IPv6 router 1629so that it does not change when the network interface 1630card is replaced. 1631For example: 1632.Bd -literal 1633ifconfig_ed0_ipv6="inet6 fe80::1 prefixlen 64" 1634.Ed 1635.It Va ipv6_prefix_ Ns Aq Ar interface 1636.Pq Vt str 1637If one or more prefixes are defined in 1638.Va ipv6_prefix_ Ns Aq Ar interface 1639addresses based on each prefix and the EUI-64 interface index will be 1640configured on that interface. 1641Note that this variable will be ignored when 1642.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1643is empty. 1644.Pp 1645For example, the following configuration 1646.Bd -literal 1647ipv6_prefix_ed0="2001:db8:1:0 2001:db8:2:0" 1648.Ed 1649.Pp 1650is equivalent to the following: 1651.Bd -literal 1652ifconfig_ed0_alias0="inet6 2001:db8:1:: eui64 prefixlen 64" 1653ifconfig_ed0_alias1="inet6 2001:db8:1:: prefixlen 64 anycast" 1654ifconfig_ed0_alias2="inet6 2001:db8:2:: eui64 prefixlen 64" 1655ifconfig_ed0_alias3="inet6 2001:db8:2:: prefixlen 64 anycast" 1656.Ed 1657.Pp 1658These Subnet-Router anycast addresses will be added only when 1659.Va ipv6_gateway_enable 1660is YES. 1661.It Va ipv6_default_interface 1662.Pq Vt str 1663If not set to 1664.Dq Li NO , 1665this is the default output interface for scoped addresses. 1666This works only with ipv6_gateway_enable="NO". 1667.It Va ip6addrctl_enable 1668.Pq Vt bool 1669This variable is to enable configuring default address selection policy table 1670.Pq RFC 3484 . 1671The table can be specified in another variable 1672.Va ip6addrctl_policy . 1673For 1674.Va ip6addrctl_policy 1675the following keywords can be specified: 1676.Dq Li ipv4_prefer , 1677.Dq Li ipv6_prefer , 1678or 1679.Dq Li AUTO . 1680.Pp 1681If 1682.Dq Li ipv4_prefer 1683or 1684.Dq Li ipv6_prefer 1685is specified, 1686.Xr ip6addrctl 8 1687installs a pre-defined policy table described in Section 2.1 1688.Pq IPv6-preferred 1689or 10.3 1690.Pq IPv4-preferred 1691of RFC 3484. 1692.Pp 1693If 1694.Dq Li AUTO 1695is specified, it attempts to read a file 1696.Pa /etc/ip6addrctl.conf 1697first. 1698If this file is found, 1699.Xr ip6addrctl 8 1700reads and installs it. 1701If not found, a policy is automatically set 1702according to 1703.Va ipv6_activate_all_interfaces 1704variable; if the variable is set to 1705.Dq Li YES 1706the IPv6-preferred one is used. 1707Otherwise IPv4-preferred. 1708.Pp 1709The default value of 1710.Va ip6addrctl_enable 1711and 1712.Va ip6addrctl_policy 1713are 1714.Dq Li YES 1715and 1716.Dq Li AUTO , 1717respectively. 1718.It Va cloned_interfaces 1719.Pq Vt str 1720Set to the list of clonable network interfaces to create on this host. 1721Further cloning arguments may be passed to the 1722.Xr ifconfig 8 1723.Cm create 1724command for each interface by setting the 1725.Va create_args_ Ns Aq Ar interface 1726variable. 1727If an interface name is specified with 1728.Dq :sticky 1729keyword, 1730the interface will not be destroyed even when 1731.Pa rc.d/netif 1732script is invoked with 1733.Dq stop 1734argument. 1735This is useful when reconfiguring the interface without destroying it. 1736Entries in 1737.Va cloned_interfaces 1738are automatically appended to 1739.Va network_interfaces 1740for configuration. 1741.It Va cloned_interfaces_sticky 1742.Pq Vt bool 1743This variable is to globally enable functionality of 1744.Dq :sticky 1745keyword in 1746.Va cloned_interfaces 1747for all interfaces. 1748The default value is 1749.Dq NO . 1750Even if this variable is specified to 1751.Dq YES , 1752.Dq :nosticky 1753keyword can be used to override it on per interface basis. 1754.It Va gif_interfaces 1755.Pq Vt str 1756This variable is deprecated in favor of 1757.Va cloned_interfaces . 1758Set to the list of 1759.Xr gif 4 1760tunnel interfaces to configure on this host. 1761A 1762.Va gifconfig_ Ns Aq Ar interface 1763variable is assumed to exist for each value of 1764.Ar interface . 1765The value of this variable is used to configure the link layer of the 1766tunnel according to the syntax of the 1767.Cm tunnel 1768option to 1769.Xr ifconfig 8 . 1770Additionally, this option ensures that each listed interface is created 1771via the 1772.Cm create 1773option to 1774.Xr ifconfig 8 1775before attempting to configure it. 1776.It Va sppp_interfaces 1777.Pq Vt str 1778Set to the list of 1779.Xr sppp 4 1780interfaces to configure on this host. 1781A 1782.Va spppconfig_ Ns Aq Ar interface 1783variable is assumed to exist for each value of 1784.Ar interface . 1785Each interface should also be configured by a general 1786.Va ifconfig_ Ns Aq Ar interface 1787setting. 1788Refer to 1789.Xr spppcontrol 8 1790for more information about available options. 1791.It Va ppp_enable 1792.Pq Vt bool 1793If set to 1794.Dq Li YES , 1795run the 1796.Xr ppp 8 1797daemon. 1798.It Va ppp_profile 1799.Pq Vt str 1800The name of the profile to use from 1801.Pa /etc/ppp/ppp.conf . 1802Also used for per-profile overrides of 1803.Va ppp_mode 1804and 1805.Va ppp_nat , 1806and 1807.Va ppp_ Ns Ao Ar profile Ac Ns _unit . 1808When the profile name contains any of the characters 1809.Dq Li .-/+ 1810they are translated to 1811.Dq Li _ 1812for the proposes of the override variable names. 1813.It Va ppp_mode 1814.Pq Vt str 1815Mode in which to run the 1816.Xr ppp 8 1817daemon. 1818.It Va ppp_ Ns Ao Ar profile Ac Ns _mode 1819.Pq Vt str 1820Overrides the global 1821.Va ppp_mode 1822for 1823.Ar profile . 1824Accepted modes are 1825.Dq Li auto , 1826.Dq Li ddial , 1827.Dq Li direct 1828and 1829.Dq Li dedicated . 1830See the manual for a full description. 1831.It Va ppp_nat 1832.Pq Vt bool 1833If set to 1834.Dq Li YES , 1835enables network address translation. 1836Used in conjunction with 1837.Va gateway_enable 1838allows hosts on private network addresses access to the Internet using 1839this host as a network address translating router. 1840.It Va ppp_ Ns Ao Ar profile Ac Ns _nat 1841.Pq Vt str 1842Overrides the global 1843.Va ppp_nat 1844for 1845.Ar profile . 1846.It Va ppp_ Ns Ao Ar profile Ac Ns _unit 1847.Pq Vt int 1848Set the unit number to be used for this profile. 1849See the manual description of 1850.Fl unit Ns Ar N 1851for details. 1852.It Va ppp_user 1853.Pq Vt str 1854The name of the user under which 1855.Xr ppp 8 1856should be started. 1857By 1858default, 1859.Xr ppp 8 1860is started as 1861.Dq Li root . 1862.It Va rc_conf_files 1863.Pq Vt str 1864This option is used to specify a list of files that will override 1865the settings in 1866.Pa /etc/defaults/rc.conf . 1867The files will be read in the order in which they are specified and should 1868include the full path to the file. 1869By default, the files specified are 1870.Pa /etc/rc.conf 1871and 1872.Pa /etc/rc.conf.local 1873.It Va zfs_enable 1874.Pq Vt bool 1875If set to 1876.Dq Li YES , 1877.Pa /etc/rc.d/zfs 1878will attempt to automatically mount ZFS file systems and initialize ZFS volumes 1879(ZVOLs). 1880.It Va gptboot_enable 1881.Pq Vt bool 1882If set to 1883.Dq Li YES , 1884.Pa /etc/rc.d/gptboot 1885will log if the system successfully (or not) booted from a GPT partition, 1886which had the 1887.Ar bootonce 1888attribute set using 1889.Xr gpart 8 1890utility. 1891.It Va gbde_autoattach_all 1892.Pq Vt bool 1893If set to 1894.Dq Li YES , 1895.Pa /etc/rc.d/gbde 1896will attempt to automatically initialize your .bde devices in 1897.Pa /etc/fstab . 1898.It Va gbde_devices 1899.Pq Vt str 1900List the devices that the script should try to attach, 1901or 1902.Dq Li AUTO . 1903.It Va gbde_lockdir 1904.Pq Vt str 1905The directory where the 1906.Xr gbde 4 1907lockfiles are located. 1908The default lockfile directory is 1909.Pa /etc . 1910.Pp 1911The lockfile for each individual 1912.Xr gbde 4 1913device can be overridden by setting the variable 1914.Va gbde_lock_ Ns Aq Ar device , 1915where 1916.Ar device 1917is the encrypted device without the 1918.Dq Pa /dev/ 1919and 1920.Dq Pa .bde 1921parts. 1922.It Va gbde_attach_attempts 1923.Pq Vt int 1924Number of times to attempt attaching to a 1925.Xr gbde 4 1926device, i.e., how many times the user is asked for the pass-phrase. 1927Default is 3. 1928.It Va geli_devices 1929.Pq Vt str 1930List of devices to automatically attach on boot. 1931Note that .eli devices from 1932.Pa /etc/fstab 1933are automatically appended to this list. 1934.It Va geli_tries 1935.Pq Vt int 1936Number of times user is asked for the pass-phrase. 1937If empty, it will be taken from 1938.Va kern.geom.eli.tries 1939sysctl variable. 1940.It Va geli_default_flags 1941.Pq Vt str 1942Default flags to use by 1943.Xr geli 8 1944when configuring disk encryption. 1945Flags can be configured for every device separately by defining 1946.Va geli_ Ns Ao Ar device Ac Ns Va _flags 1947variable. 1948.It Va geli_autodetach 1949.Pq Vt str 1950Specifies if GELI devices should be marked for detach on last close after 1951file systems are mounted. 1952Default is 1953.Dq Li YES . 1954This can be changed for every device separately by defining 1955.Va geli_ Ns Ao Ar device Ac Ns Va _autodetach 1956variable. 1957.It Va root_rw_mount 1958.Pq Vt bool 1959Set to 1960.Dq Li YES 1961by default. 1962After the file systems are checked at boot time, the root file system 1963is remounted as read-write if this is set to 1964.Dq Li YES . 1965Diskless systems that mount their root file system from a read-only remote 1966NFS share should set this to 1967.Dq Li NO 1968in their 1969.Pa rc.conf . 1970.It Va fsck_y_enable 1971.Pq Vt bool 1972If set to 1973.Dq Li YES , 1974.Xr fsck 8 1975will be run with the 1976.Fl y 1977flag if the initial preen 1978of the file systems fails. 1979.It Va background_fsck 1980.Pq Vt bool 1981If set to 1982.Dq Li YES , 1983the system will attempt to run 1984.Xr fsck 8 1985in the background where possible. 1986.It Va background_fsck_delay 1987.Pq Vt int 1988The amount of time in seconds to sleep before starting a background 1989.Xr fsck 8 . 1990It defaults to sixty seconds to allow large applications such as 1991the X server to start before disk I/O bandwidth is monopolized by 1992.Xr fsck 8 . 1993If set to a negative number, the background file system check will be 1994delayed indefinitely to allow the administrator to run it at a more 1995convenient time. 1996For example it may be run from 1997.Xr cron 8 1998by adding a line like 1999.Pp 2000.Dl "0 4 * * * root /etc/rc.d/bgfsck forcestart" 2001.Pp 2002to 2003.Pa /etc/crontab . 2004.It Va netfs_types 2005.Pq Vt str 2006List of file system types that are network-based. 2007This list should generally not be modified by end users. 2008Use 2009.Va extra_netfs_types 2010instead. 2011.It Va extra_netfs_types 2012.Pq Vt str 2013If set to something other than 2014.Dq Li NO 2015(the default), 2016this variable extends the list of file system types 2017for which automatic mounting at startup by 2018.Xr rc 8 2019should be delayed until the network is initialized. 2020It should contain 2021a whitespace-separated list of network file system descriptor pairs, 2022each consisting of a file system type as passed to 2023.Xr mount 8 2024and a human-readable, one-word description, 2025joined with a colon 2026.Pq Ql \&: . 2027Extending the default list in this way is only necessary 2028when third party file system types are used. 2029.It Va syslogd_enable 2030.Pq Vt bool 2031If set to 2032.Dq Li YES , 2033run the 2034.Xr syslogd 8 2035daemon. 2036.It Va syslogd_program 2037.Pq Vt str 2038Path to 2039.Xr syslogd 8 2040(default 2041.Pa /usr/sbin/syslogd ) . 2042.It Va syslogd_flags 2043.Pq Vt str 2044If 2045.Va syslogd_enable 2046is set to 2047.Dq Li YES , 2048these are the flags to pass to 2049.Xr syslogd 8 . 2050.It Va inetd_enable 2051.Pq Vt bool 2052If set to 2053.Dq Li YES , 2054run the 2055.Xr inetd 8 2056daemon. 2057.It Va inetd_program 2058.Pq Vt str 2059Path to 2060.Xr inetd 8 2061(default 2062.Pa /usr/sbin/inetd ) . 2063.It Va inetd_flags 2064.Pq Vt str 2065If 2066.Va inetd_enable 2067is set to 2068.Dq Li YES , 2069these are the flags to pass to 2070.Xr inetd 8 . 2071.It Va hastd_enable 2072.Pq Vt bool 2073If set to 2074.Dq Li YES , 2075run the 2076.Xr hastd 8 2077daemon. 2078.It Va hastd_program 2079.Pq Vt str 2080Path to 2081.Xr hastd 8 2082(default 2083.Pa /sbin/hastd ) . 2084.It Va hastd_flags 2085.Pq Vt str 2086If 2087.Va hastd_enable 2088is set to 2089.Dq Li YES , 2090these are the flags to pass to 2091.Xr hastd 8 . 2092.It Va local_unbound_enable 2093.Pq Vt bool 2094If set to 2095.Dq Li YES , 2096run the 2097.Xr unbound 8 2098daemon as a local caching resolver. 2099.It Va kdc_enable 2100.Pq Vt bool 2101Set to 2102.Dq Li YES 2103to start a Kerberos 5 authentication server 2104at boot time. 2105.It Va kdc_program 2106.Pq Vt str 2107If 2108.Va kdc_enable 2109is set to 2110.Dq Li YES 2111this is the path to Kerberos 5 Authentication Server. 2112.It Va kdc_flags 2113.Pq Vt str 2114Empty by default. 2115This variable contains additional flags to be passed to the Kerberos 5 2116authentication server. 2117.It Va kadmind_enable 2118.Pq Vt bool 2119Set to 2120.Dq Li YES 2121to start 2122.Xr kadmind 8 , 2123the Kerberos 5 Administration Daemon; set to 2124.Dq Li NO 2125on a slave server. 2126.It Va kadmind_program 2127.Pq Vt str 2128If 2129.Va kadmind_enable 2130is set to 2131.Dq Li YES 2132this is the path to Kerberos 5 Administration Daemon. 2133.It Va kpasswdd_enable 2134.Pq Vt bool 2135Set to 2136.Dq Li YES 2137to start 2138.Xr kpasswdd 8 , 2139the Kerberos 5 Password-Changing Daemon; set to 2140.Dq Li NO 2141on a slave server. 2142.It Va kpasswdd_program 2143.Pq Vt str 2144If 2145.Va kpasswdd_enable 2146is set to 2147.Dq Li YES 2148this is the path to Kerberos 5 Password-Changing Daemon. 2149.It Va kfd_enable 2150.Pq Vt bool 2151Set to 2152.Dq Li YES 2153to start 2154.Xr kfd 8 , 2155the Kerberos 5 ticket forwarding daemon, at the boot time. 2156.It Va kfd_program 2157.Pq Vt str 2158Path to 2159.Xr kfd 8 2160(default 2161.Pa /usr/libexec/kfd ) . 2162.It Va rwhod_enable 2163.Pq Vt bool 2164If set to 2165.Dq Li YES , 2166run the 2167.Xr rwhod 8 2168daemon at boot time. 2169.It Va rwhod_flags 2170.Pq Vt str 2171If 2172.Va rwhod_enable 2173is set to 2174.Dq Li YES , 2175these are the flags to pass to it. 2176.It Va amd_enable 2177.Pq Vt bool 2178If set to 2179.Dq Li YES , 2180run the 2181.Xr amd 8 2182daemon at boot time. 2183.It Va amd_flags 2184.Pq Vt str 2185If 2186.Va amd_enable 2187is set to 2188.Dq Li YES , 2189these are the flags to pass to it. 2190See the 2191.Xr amd 8 2192manpage for more information. 2193.It Va amd_map_program 2194.Pq Vt str 2195If set, 2196the specified program is run to get the list of 2197.Xr amd 8 2198maps. 2199For example, if the 2200.Xr amd 8 2201maps are stored in NIS, one can set this to 2202run 2203.Xr ypcat 1 2204to get a list of 2205.Xr amd 8 2206maps from the 2207.Pa amd.master 2208NIS map. 2209.It Va update_motd 2210.Pq Vt bool 2211If set to 2212.Dq Li YES , 2213.Pa /etc/motd 2214will be updated at boot time to reflect the kernel release 2215being run. 2216If set to 2217.Dq Li NO , 2218.Pa /etc/motd 2219will not be updated. 2220.It Va nfs_client_enable 2221.Pq Vt bool 2222If set to 2223.Dq Li YES , 2224run the NFS client daemons at boot time. 2225.It Va nfs_access_cache 2226.Pq Vt int 2227If 2228.Va nfs_client_enable 2229is set to 2230.Dq Li YES , 2231this can be set to 2232.Dq Li 0 2233to disable NFS ACCESS RPC caching, or to the number of seconds for which 2234NFS ACCESS 2235results should be cached. 2236A value of 2-10 seconds will substantially reduce network 2237traffic for many NFS operations. 2238.It Va nfs_server_enable 2239.Pq Vt bool 2240If set to 2241.Dq Li YES , 2242run the NFS server daemons at boot time. 2243.It Va nfs_server_flags 2244.Pq Vt str 2245If 2246.Va nfs_server_enable 2247is set to 2248.Dq Li YES , 2249these are the flags to pass to the 2250.Xr nfsd 8 2251daemon. 2252.It Va nfsv4_server_enable 2253.Pq Vt bool 2254If 2255.Va nfs_server_enable 2256is set to 2257.Dq Li YES 2258and 2259.Va nfsv4_server_enable 2260are set to 2261.Dq Li YES , 2262enable the server for NFSv4 as well as NFSv2 and NFSv3. 2263.It Va nfsuserd_enable 2264.Pq Vt bool 2265If 2266.Va nfsuserd_enable 2267is set to 2268.Dq Li YES , 2269run the nfsuserd daemon, which is needed for NFSv4 in order 2270to map between user/group names vs uid/gid numbers. 2271If 2272.Va nfsv4_server_enable 2273is set to 2274.Dq Li YES , 2275this will be forced enabled. 2276.It Va nfsuserd_flags 2277.Pq Vt str 2278If 2279.Va nfsuserd_enable 2280is set to 2281.Dq Li YES , 2282these are the flags to pass to the 2283.Xr nfsuserd 8 2284daemon. 2285.It Va nfscbd_enable 2286.Pq Vt bool 2287If 2288.Va nfscbd_enable 2289is set to 2290.Dq Li YES , 2291run the nfscbd daemon, which enables callbacks/delegations for the NFSv4 client. 2292.It Va nfscbd_flags 2293.Pq Vt str 2294If 2295.Va nfscbd_enable 2296is set to 2297.Dq Li YES , 2298these are the flags to pass to the 2299.Xr nfscbd 8 2300daemon. 2301.It Va mountd_enable 2302.Pq Vt bool 2303If set to 2304.Dq Li YES , 2305and no 2306.Va nfs_server_enable 2307is set, start 2308.Xr mountd 8 , 2309but not 2310.Xr nfsd 8 2311daemon. 2312It is commonly needed to run CFS without real NFS used. 2313.It Va mountd_flags 2314.Pq Vt str 2315If 2316.Va mountd_enable 2317is set to 2318.Dq Li YES , 2319these are the flags to pass to the 2320.Xr mountd 8 2321daemon. 2322.It Va weak_mountd_authentication 2323.Pq Vt bool 2324If set to 2325.Dq Li YES , 2326allow services like PCNFSD to make non-privileged mount 2327requests. 2328.It Va nfs_reserved_port_only 2329.Pq Vt bool 2330If set to 2331.Dq Li YES , 2332provide NFS services only on a secure port. 2333.It Va nfs_bufpackets 2334.Pq Vt int 2335If set to a number, indicates the number of packets worth of 2336socket buffer space to reserve on an NFS client. 2337The kernel default is typically 4. 2338Using a higher number may be 2339useful on gigabit networks to improve performance. 2340The minimum value is 23412 and the maximum is 64. 2342.It Va rpc_lockd_enable 2343.Pq Vt bool 2344If set to 2345.Dq Li YES 2346and also an NFS server or client, run 2347.Xr rpc.lockd 8 2348at boot time. 2349.It Va rpc_lockd_flags 2350.Pq Vt str 2351If 2352.Va rpc_lockd_enable 2353is set to 2354.Dq Li YES , 2355these are the flags to pass to the 2356.Xr rpc.lockd 8 2357daemon. 2358.It Va rpc_statd_enable 2359.Pq Vt bool 2360If set to 2361.Dq Li YES 2362and also an NFS server or client, run 2363.Xr rpc.statd 8 2364at boot time. 2365.It Va rpc_statd_flags 2366.Pq Vt str 2367If 2368.Va rpc_statd_enable 2369is set to 2370.Dq Li YES , 2371these are the flags to pass to the 2372.Xr rpc.statd 8 2373daemon. 2374.It Va rpcbind_program 2375.Pq Vt str 2376Path to 2377.Xr rpcbind 8 2378(default 2379.Pa /usr/sbin/rpcbind ) . 2380.It Va rpcbind_enable 2381.Pq Vt bool 2382If set to 2383.Dq Li YES , 2384run the 2385.Xr rpcbind 8 2386service at boot time. 2387.It Va rpcbind_flags 2388.Pq Vt str 2389If 2390.Va rpcbind_enable 2391is set to 2392.Dq Li YES , 2393these are the flags to pass to the 2394.Xr rpcbind 8 2395daemon. 2396.It Va keyserv_enable 2397.Pq Vt bool 2398If set to 2399.Dq Li YES , 2400run the 2401.Xr keyserv 8 2402daemon on boot for running Secure RPC. 2403.It Va keyserv_flags 2404.Pq Vt str 2405If 2406.Va keyserv_enable 2407is set to 2408.Dq Li YES , 2409these are the flags to pass to 2410.Xr keyserv 8 2411daemon. 2412.It Va pppoed_enable 2413.Pq Vt bool 2414If set to 2415.Dq Li YES , 2416run the 2417.Xr pppoed 8 2418daemon at boot time to provide PPP over Ethernet services. 2419.It Va pppoed_ Ns Aq Ar provider 2420.Pq Vt str 2421.Xr pppoed 8 2422listens to requests to this 2423.Ar provider 2424and ultimately runs 2425.Xr ppp 8 2426with a 2427.Ar system 2428argument of the same name. 2429.It Va pppoed_flags 2430.Pq Vt str 2431Additional flags to pass to 2432.Xr pppoed 8 . 2433.It Va pppoed_interface 2434.Pq Vt str 2435The network interface to run 2436.Xr pppoed 8 2437on. 2438This is mandatory when 2439.Va pppoed_enable 2440is set to 2441.Dq Li YES . 2442.It Va timed_enable 2443.Pq Vt bool 2444If set to 2445.Dq Li YES , 2446run the 2447.Xr timed 8 2448service at boot time. 2449This command is intended for networks of 2450machines where a consistent 2451.Dq "network time" 2452for all hosts must be established. 2453This is often useful in large NFS 2454environments where time stamps on files are expected to be consistent 2455network-wide. 2456.It Va timed_flags 2457.Pq Vt str 2458If 2459.Va timed_enable 2460is set to 2461.Dq Li YES , 2462these are the flags to pass to the 2463.Xr timed 8 2464service. 2465.It Va ntpdate_enable 2466.Pq Vt bool 2467If set to 2468.Dq Li YES , 2469run 2470.Xr ntpdate 8 2471at system startup. 2472This command is intended to 2473synchronize the system clock only 2474.Em once 2475from some standard reference. 2476.It Va ntpdate_config 2477.Pq Vt str 2478Configuration file for 2479.Xr ntpdate 8 . 2480Default 2481.Pa /etc/ntp.conf . 2482.It Va ntpdate_hosts 2483.Pq Vt str 2484A whitespace-separated list of NTP servers to synchronize with at startup. 2485The default is to use the servers listed in 2486.Va ntpdate_config , 2487if that file exists. 2488.It Va ntpdate_program 2489.Pq Vt str 2490Path to 2491.Xr ntpdate 8 2492(default 2493.Pa /usr/sbin/ntpdate ) . 2494.It Va ntpdate_flags 2495.Pq Vt str 2496If 2497.Va ntpdate_enable 2498is set to 2499.Dq Li YES , 2500these are the flags to pass to the 2501.Xr ntpdate 8 2502command (typically a hostname). 2503.It Va ntpd_enable 2504.Pq Vt bool 2505If set to 2506.Dq Li YES , 2507run the 2508.Xr ntpd 8 2509command at boot time. 2510.It Va ntpd_program 2511.Pq Vt str 2512Path to 2513.Xr ntpd 8 2514(default 2515.Pa /usr/sbin/ntpd ) . 2516.It Va ntpd_config 2517.Pq Vt str 2518Path to 2519.Xr ntpd 8 2520configuration file. 2521Default 2522.Pa /etc/ntp.conf . 2523.It Va ntpd_flags 2524.Pq Vt str 2525If 2526.Va ntpd_enable 2527is set to 2528.Dq Li YES , 2529these are the flags to pass to the 2530.Xr ntpd 8 2531daemon. 2532.It Va ntpd_sync_on_start 2533.Pq Vt bool 2534If set to 2535.Dq Li YES , 2536.Xr ntpd 8 2537is run with the 2538.Fl g 2539flag, which syncs the system's clock on startup. 2540See 2541.Xr ntpd 8 2542for more information regarding the 2543.Fl g 2544option. 2545This is a preferred alternative to using 2546.Xr ntpdate 8 2547or specifying the 2548.Va ntpdate_enable 2549variable. 2550.It Va nis_client_enable 2551.Pq Vt bool 2552If set to 2553.Dq Li YES , 2554run the 2555.Xr ypbind 8 2556service at system boot time. 2557.It Va nis_client_flags 2558.Pq Vt str 2559If 2560.Va nis_client_enable 2561is set to 2562.Dq Li YES , 2563these are the flags to pass to the 2564.Xr ypbind 8 2565service. 2566.It Va nis_ypldap_enable 2567.Pq Vt bool 2568If set to 2569.Dq Li YES , 2570run the 2571.Xr ypldap 8 2572daemon at system boot time. 2573.It Va nis_ypldap_flags 2574.Pq Vt str 2575If 2576.Va nis.ypldap_enable 2577is set to 2578.Dq Li YES , 2579these are the flags to pass to the 2580.Xr ypldap 8 2581daemon. 2582.It Va nis_ypset_enable 2583.Pq Vt bool 2584If set to 2585.Dq Li YES , 2586run the 2587.Xr ypset 8 2588daemon at system boot time. 2589.It Va nis_ypset_flags 2590.Pq Vt str 2591If 2592.Va nis_ypset_enable 2593is set to 2594.Dq Li YES , 2595these are the flags to pass to the 2596.Xr ypset 8 2597daemon. 2598.It Va nis_server_enable 2599.Pq Vt bool 2600If set to 2601.Dq Li YES , 2602run the 2603.Xr ypserv 8 2604daemon at system boot time. 2605.It Va nis_server_flags 2606.Pq Vt str 2607If 2608.Va nis_server_enable 2609is set to 2610.Dq Li YES , 2611these are the flags to pass to the 2612.Xr ypserv 8 2613daemon. 2614.It Va nis_ypxfrd_enable 2615.Pq Vt bool 2616If set to 2617.Dq Li YES , 2618run the 2619.Xr rpc.ypxfrd 8 2620daemon at system boot time. 2621.It Va nis_ypxfrd_flags 2622.Pq Vt str 2623If 2624.Va nis_ypxfrd_enable 2625is set to 2626.Dq Li YES , 2627these are the flags to pass to the 2628.Xr rpc.ypxfrd 8 2629daemon. 2630.It Va nis_yppasswdd_enable 2631.Pq Vt bool 2632If set to 2633.Dq Li YES , 2634run the 2635.Xr rpc.yppasswdd 8 2636daemon at system boot time. 2637.It Va nis_yppasswdd_flags 2638.Pq Vt str 2639If 2640.Va nis_yppasswdd_enable 2641is set to 2642.Dq Li YES , 2643these are the flags to pass to the 2644.Xr rpc.yppasswdd 8 2645daemon. 2646.It Va rpc_ypupdated_enable 2647.Pq Vt bool 2648If set to 2649.Dq Li YES , 2650run the 2651.Nm rpc.ypupdated 2652daemon at system boot time. 2653.It Va bsnmpd_enable 2654.Pq Vt bool 2655If set to 2656.Dq Li YES , 2657run the 2658.Xr bsnmpd 1 2659daemon at system boot time. 2660Be sure to understand the security implications of running SNMP daemon 2661on your host. 2662.It Va bsnmpd_flags 2663.Pq Vt str 2664If 2665.Va bsnmpd_enable 2666is set to 2667.Dq Li YES , 2668these are the flags to pass to the 2669.Xr bsnmpd 1 2670daemon. 2671.It Va defaultrouter 2672.Pq Vt str 2673If not set to 2674.Dq Li NO , 2675create a default route to this host name or IP address 2676(use an IP address if this router is also required to get to the 2677name server!). 2678.It Va ipv6_defaultrouter 2679.Pq Vt str 2680The IPv6 equivalent of 2681.Va defaultrouter . 2682.It Va static_arp_pairs 2683.Pq Vt str 2684Set to the list of static ARP pairs that are to be added at system 2685boot time. 2686For each whitespace separated 2687.Ar element 2688in the value, a 2689.Va static_arp_ Ns Aq Ar element 2690variable is assumed to exist whose contents will later be passed to a 2691.Dq Nm arp Cm -S 2692operation. 2693For example 2694.Bd -literal 2695static_arp_pairs="gw" 2696static_arp_gw="192.168.1.1 00:01:02:03:04:05" 2697.Ed 2698.It Va static_ndp_pairs 2699.Pq Vt str 2700Set to the list of static NDP pairs that are to be added at system 2701boot time. 2702For each whitespace separated 2703.Ar element 2704in the value, a 2705.Va static_ndp_ Ns Aq Ar element 2706variable is assumed to exist whose contents will later be passed to a 2707.Dq Nm ndp Cm -s 2708operation. 2709For example 2710.Bd -literal 2711static_ndp_pairs="gw" 2712static_ndp_gw="2001:db8:3::1 00:01:02:03:04:05" 2713.Ed 2714.It Va static_routes 2715.Pq Vt str 2716Set to the list of static routes that are to be added at system 2717boot time. 2718If not set to 2719.Dq Li NO 2720then for each whitespace separated 2721.Ar element 2722in the value, a 2723.Va route_ Ns Aq Ar element 2724variable is assumed to exist 2725whose contents will later be passed to a 2726.Dq Nm route Cm add 2727operation. 2728For example: 2729.Bd -literal 2730static_routes="ext mcast:gif0 gif0local:gif0" 2731route_ext="-net 10.0.0.0/24 -gateway 192.168.0.1" 2732route_mcast="-net 224.0.0.0/4 -iface gif0" 2733route_gif0local="-host 169.254.1.1 -iface lo0" 2734.Ed 2735.Pp 2736When an 2737.Ar element 2738is in the form of 2739.Li name:ifname , 2740the route is specific to the interface 2741.Li ifname . 2742.It Va ipv6_static_routes 2743.Pq Vt str 2744The IPv6 equivalent of 2745.Va static_routes . 2746If not set to 2747.Dq Li NO 2748then for each whitespace separated 2749.Ar element 2750in the value, a 2751.Va ipv6_route_ Ns Aq Ar element 2752variable is assumed to exist 2753whose contents will later be passed to a 2754.Dq Nm route Cm add Fl inet6 2755operation. 2756.It Va natm_static_routes 2757.Pq Vt str 2758The 2759.Xr natmip 4 2760equivalent of 2761.Va static_routes . 2762If not empty then for each whitespace separated 2763.Ar element 2764in the value, a 2765.Va route_ Ns Aq Ar element 2766variable is assumed to exist whose contents will later be passed to a 2767.Dq Nm atmconfig Cm natm Cm add 2768operation. 2769.It Va gateway_enable 2770.Pq Vt bool 2771If set to 2772.Dq Li YES , 2773configure host to act as an IP router, e.g.\& to forward packets 2774between interfaces. 2775.It Va ipv6_gateway_enable 2776.Pq Vt bool 2777The IPv6 equivalent of 2778.Va gateway_enable . 2779.It Va routed_enable 2780.Pq Vt bool 2781If set to 2782.Dq Li YES , 2783run a routing daemon of some sort, based on the 2784settings of 2785.Va routed_program 2786and 2787.Va routed_flags . 2788.It Va route6d_enable 2789.Pq Vt bool 2790The IPv6 equivalent of 2791.Va routed_enable . 2792If set to 2793.Dq Li YES , 2794run a routing daemon of some sort, based on the 2795settings of 2796.Va route6d_program 2797and 2798.Va route6d_flags . 2799.It Va routed_program 2800.Pq Vt str 2801If 2802.Va routed_enable 2803is set to 2804.Dq Li YES , 2805this is the name of the routing daemon to use. 2806.It Va route6d_program 2807.Pq Vt str 2808The IPv6 equivalent of 2809.Va routed_program . 2810.It Va routed_flags 2811.Pq Vt str 2812If 2813.Va routed_enable 2814is set to 2815.Dq Li YES , 2816these are the flags to pass to the routing daemon. 2817.It Va route6d_flags 2818.Pq Vt str 2819The IPv6 equivalent of 2820.Va routed_flags . 2821.It Va mroute6d_enable 2822.Pq Vt bool 2823If set to 2824.Dq Li YES , 2825run the IPv6 multicast routing daemon. 2826.Pp 2827Note that multicast routing daemons are no longer included in the 2828.Fx 2829base system, however, both 2830.Xr mrouted 8 2831and 2832.Xr pim6dd 8 2833may be installed from the 2834.Fx 2835Ports Collection. 2836.It Va mroute6d_flags 2837.Pq Vt str 2838If 2839.Va mroute6d_enable 2840is set to 2841.Dq Li YES , 2842these are the flags passed to the IPv6 multicast routing daemon. 2843.It Va mroute6d_program 2844.Pq Vt str 2845If 2846.Va mroute6d_enable 2847is set to 2848.Dq Li YES , 2849this is the path to the IPv6 multicast routing daemon. 2850.It Va rtadvd_enable 2851.Pq Vt bool 2852If set to 2853.Dq Li YES , 2854run the 2855.Xr rtadvd 8 2856daemon at boot time. 2857The 2858.Xr rtadvd 8 2859utility sends ICMPv6 Router Advertisement messages to 2860the interfaces specified in 2861.Va rtadvd_interfaces . 2862This should only be enabled with great care. 2863You may want to fine-tune 2864.Xr rtadvd.conf 5 . 2865.It Va rtadvd_interfaces 2866.Pq Vt str 2867If 2868.Va rtadvd_enable 2869is set to 2870.Dq Li YES 2871this is the list of interfaces to use. 2872.It Va arpproxy_all 2873.Pq Vt bool 2874If set to 2875.Dq Li YES , 2876enable global proxy ARP. 2877.It Va forward_sourceroute 2878.Pq Vt bool 2879If set to 2880.Dq Li YES 2881and 2882.Va gateway_enable 2883is also set to 2884.Dq Li YES , 2885source-routed packets are forwarded. 2886.It Va accept_sourceroute 2887.Pq Vt bool 2888If set to 2889.Dq Li YES , 2890the system will accept source-routed packets directed at it. 2891.It Va rarpd_enable 2892.Pq Vt bool 2893If set to 2894.Dq Li YES , 2895run the 2896.Xr rarpd 8 2897daemon at system boot time. 2898.It Va rarpd_flags 2899.Pq Vt str 2900If 2901.Va rarpd_enable 2902is set to 2903.Dq Li YES , 2904these are the flags to pass to the 2905.Xr rarpd 8 2906daemon. 2907.It Va bootparamd_enable 2908.Pq Vt bool 2909If set to 2910.Dq Li YES , 2911run the 2912.Xr bootparamd 8 2913daemon at system boot time. 2914.It Va bootparamd_flags 2915.Pq Vt str 2916If 2917.Va bootparamd_enable 2918is set to 2919.Dq Li YES , 2920these are the flags to pass to the 2921.Xr bootparamd 8 2922daemon. 2923.It Va stf_interface_ipv4addr 2924.Pq Vt str 2925If not set to 2926.Dq Li NO , 2927this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling 2928interface). 2929Specify this entry to enable the 6to4 interface. 2930.It Va stf_interface_ipv4plen 2931.Pq Vt int 2932Prefix length for 6to4 IPv4 addresses, to limit peer address range. 2933An effective value is 0-31. 2934.It Va stf_interface_ipv6_ifid 2935.Pq Vt str 2936IPv6 interface ID for 2937.Xr stf 4 . 2938This can be set to 2939.Dq Li AUTO . 2940.It Va stf_interface_ipv6_slaid 2941.Pq Vt str 2942IPv6 Site Level Aggregator for 2943.Xr stf 4 . 2944.It Va ipv6_ipv4mapping 2945.Pq Vt bool 2946If set to 2947.Dq Li YES 2948this enables IPv4 mapped IPv6 address communication (like 2949.Li ::ffff:a.b.c.d ) . 2950.It Va rtsold_enable 2951.Pq Vt bool 2952Set to 2953.Dq Li YES 2954to enable the 2955.Xr rtsold 8 2956daemon to send ICMPv6 Router Solicitation messages. 2957.It Va rtsold_flags 2958.Pq Vt str 2959If 2960.Va rtsold_enable 2961is set to 2962.Dq Li YES , 2963these are the flags to pass to 2964.Xr rtsold 8 . 2965.It Va rtsol_flags 2966.Pq Vt str 2967For interfaces configured with the 2968.Dq Li inet6 accept_rtadv 2969keyword, these are the flags to pass to 2970.Xr rtsol 8 . 2971.Pp 2972Note that 2973.Va rtsold_enable 2974is mutually exclusive to 2975.Va rtsol_flags ; 2976.Va rtsold_enable 2977takes precedence. 2978.It Va atm_enable 2979.Pq Vt bool 2980Set to 2981.Dq Li YES 2982to enable the configuration of ATM interfaces at system boot time. 2983For all of the ATM variables described below, please refer to the 2984.Xr atm 8 2985manual page for further details on the available command parameters. 2986Also refer to the files in 2987.Pa /usr/share/examples/atm 2988for more detailed configuration information. 2989.It Va atm_load 2990.Pq Vt str 2991This is a list of physical ATM interface drivers to load. 2992Typical values are 2993.Dq Li hfa_pci 2994and/or 2995.Dq Li hea_pci . 2996.It Va atm_netif_ Ns Aq Ar intf 2997.Pq Vt str 2998For the ATM physical interface 2999.Ar intf , 3000this variable defines the name prefix and count for the ATM network 3001interfaces to be created. 3002The value will be passed as the parameters of an 3003.Dq Nm atm Cm "set netif" Ar intf 3004command. 3005.It Va atm_sigmgr_ Ns Aq Ar intf 3006.Pq Vt str 3007For the ATM physical interface 3008.Ar intf , 3009this variable defines the ATM signalling manager to be used. 3010The value will be passed as the parameters of an 3011.Dq Nm atm Cm attach Ar intf 3012command. 3013.It Va atm_prefix_ Ns Aq Ar intf 3014.Pq Vt str 3015For the ATM physical interface 3016.Ar intf , 3017this variable defines the NSAP prefix for interfaces using a UNI signalling 3018manager. 3019If set to 3020.Dq Li ILMI , 3021the prefix will automatically be set via the 3022.Xr ilmid 8 3023daemon. 3024Otherwise, the value will be passed as the parameters of an 3025.Dq Nm atm Cm "set prefix" Ar intf 3026command. 3027.It Va atm_macaddr_ Ns Aq Ar intf 3028.Pq Vt str 3029For the ATM physical interface 3030.Ar intf , 3031this variable defines the MAC address for interfaces using a UNI signalling 3032manager. 3033If set to 3034.Dq Li NO , 3035the hardware MAC address contained in the ATM interface card will be used. 3036Otherwise, the value will be passed as the parameters of an 3037.Dq Nm atm Cm "set mac" Ar intf 3038command. 3039.It Va atm_arpserver_ Ns Aq Ar netif 3040.Pq Vt str 3041For the ATM network interface 3042.Ar netif , 3043this variable defines the ATM address for a host which is to provide ATMARP 3044service. 3045This variable is only applicable to interfaces using a UNI signalling 3046manager. 3047If set to 3048.Dq Li local , 3049this host will become an ATMARP server. 3050The value will be passed as the parameters of an 3051.Dq Nm atm Cm "set arpserver" Ar netif 3052command. 3053.It Va atm_scsparp_ Ns Aq Ar netif 3054.Pq Vt bool 3055If set to 3056.Dq Li YES , 3057SCSP/ATMARP service for the network interface 3058.Ar netif 3059will be initiated using the 3060.Xr scspd 8 3061and 3062.Xr atmarpd 8 3063daemons. 3064This variable is only applicable if 3065.Va atm_arpserver_ Ns Aq Ar netif 3066is set to 3067.Dq Li local . 3068.It Va atm_pvcs 3069.Pq Vt str 3070Set to the list of ATM PVCs to be added at system 3071boot time. 3072For each whitespace separated 3073.Ar element 3074in the value, an 3075.Va atm_pvc_ Ns Aq Ar element 3076variable is assumed to exist. 3077The value of each of these variables 3078will be passed as the parameters of an 3079.Dq Nm atm Cm "add pvc" 3080command. 3081.It Va atm_arps 3082.Pq Vt str 3083Set to the list of permanent ATM ARP entries to be added 3084at system boot time. 3085For each whitespace separated 3086.Ar element 3087in the value, an 3088.Va atm_arp_ Ns Aq Ar element 3089variable is assumed to exist. 3090The value of each of these variables 3091will be passed as the parameters of an 3092.Dq Nm atm Cm "add arp" 3093command. 3094.It Va natm_interfaces 3095.Pq Vt str 3096Set to the list of 3097.Xr natm 4 3098interfaces that will also be used for HARP through 3099.Xr harp 4 . 3100If this list is not empty all interfaces in the list will be brought up 3101with 3102.Xr ifconfig 8 3103and 3104.Xr harp 4 3105will be loaded. 3106For this to work the interface drivers must be either compiled into the 3107kernel or must reside on the root partition. 3108.It Va keybell 3109.Pq Vt str 3110The keyboard bell sound. 3111Set to 3112.Dq Li normal , 3113.Dq Li visual , 3114.Dq Li off , 3115or 3116.Dq Li NO 3117if the default behavior is desired. 3118For details, refer to the 3119.Xr kbdcontrol 1 3120manpage. 3121.It Va keyboard 3122.Pq Vt str 3123If set to a non-null string, the virtual console's keyboard input is 3124set to this device. 3125.It Va keymap 3126.Pq Vt str 3127If set to 3128.Dq Li NO , 3129no keymap is installed, otherwise the value is used to install 3130the keymap file found in 3131.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd 3132(if using 3133.Xr syscons 4 ) or 3134.Pa /usr/share/vt/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd 3135(if using 3136.Xr vt 4 ) . 3137.It Va keyrate 3138.Pq Vt str 3139The keyboard repeat speed. 3140Set to 3141.Dq Li slow , 3142.Dq Li normal , 3143.Dq Li fast , 3144or 3145.Dq Li NO 3146if the default behavior is desired. 3147.It Va keychange 3148.Pq Vt str 3149If not set to 3150.Dq Li NO , 3151attempt to program the function keys with the value. 3152The value should 3153be a single string of the form: 3154.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... . 3155.It Va cursor 3156.Pq Vt str 3157Can be set to the value of 3158.Dq Li normal , 3159.Dq Li blink , 3160.Dq Li destructive , 3161or 3162.Dq Li NO 3163to set the cursor behavior explicitly or choose the default behavior. 3164.It Va scrnmap 3165.Pq Vt str 3166If set to 3167.Dq Li NO , 3168no screen map is installed, otherwise the value is used to install 3169the screen map file in 3170.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value . 3171This parameter is ignored when using 3172.Xr vt 4 3173as the console driver. 3174.It Va font8x16 3175.Pq Vt str 3176If set to 3177.Dq Li NO , 3178the default 8x16 font value is used for screen size requests, otherwise 3179the value in 3180.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 3181or 3182.Pa /usr/share/vt/fonts/ Ns Aq Ar value 3183is used (depending on the console driver being used). 3184.It Va font8x14 3185.Pq Vt str 3186If set to 3187.Dq Li NO , 3188the default 8x14 font value is used for screen size requests, otherwise 3189the value in 3190.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 3191or 3192.Pa /usr/share/vt/fonts/ Ns Aq Ar value 3193is used (depending on the console driver being used). 3194.It Va font8x8 3195.Pq Vt str 3196If set to 3197.Dq Li NO , 3198the default 8x8 font value is used for screen size requests, otherwise 3199the value in 3200.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 3201or 3202.Pa /usr/share/vt/fonts/ Ns Aq Ar value 3203is used (depending on the console driver being used). 3204.It Va blanktime 3205.Pq Vt int 3206If set to 3207.Dq Li NO , 3208the default screen blanking interval is used, otherwise it is set 3209to 3210.Ar value 3211seconds. 3212.It Va saver 3213.Pq Vt str 3214If not set to 3215.Dq Li NO , 3216this is the actual screen saver to use 3217.Li ( blank , snake , daemon , 3218etc). 3219.It Va moused_nondefault_enable 3220.Pq Vt str 3221If set to 3222.Dq Li NO , 3223the mouse device specified on 3224the command line is not automatically treated as enabled by the 3225.Pa /etc/rc.d/moused 3226script. 3227Having this variable set to 3228.Dq Li YES 3229allows a 3230.Xr usb 4 3231mouse, 3232for example, 3233to be enabled as soon as it is plugged in. 3234.It Va moused_enable 3235.Pq Vt str 3236If set to 3237.Dq Li YES , 3238the 3239.Xr moused 8 3240daemon is started for doing cut/paste selection on the console. 3241.It Va moused_type 3242.Pq Vt str 3243This is the protocol type of the mouse connected to this host. 3244This variable must be set if 3245.Va moused_enable 3246is set to 3247.Dq Li YES . 3248The 3249.Xr moused 8 3250daemon 3251is able to detect the appropriate mouse type automatically in many cases. 3252Set this variable to 3253.Dq Li auto 3254to let the daemon detect it, or 3255select one from the following list if the automatic detection fails. 3256.Pp 3257If the mouse is attached to the PS/2 mouse port, choose 3258.Dq Li auto 3259or 3260.Dq Li ps/2 , 3261regardless of the brand and model of the mouse. 3262Likewise, if the 3263mouse is attached to the bus mouse port, choose 3264.Dq Li auto 3265or 3266.Dq Li busmouse . 3267All other protocols are for serial mice and will not work with 3268the PS/2 and bus mice. 3269If this is a USB mouse, 3270.Dq Li auto 3271is the only protocol type which will work. 3272.Pp 3273.Bl -tag -width ".Li x10mouseremote" -compact 3274.It Li microsoft 3275Microsoft mouse (serial) 3276.It Li intellimouse 3277Microsoft IntelliMouse (serial) 3278.It Li mousesystems 3279Mouse systems Corp.\& mouse (serial) 3280.It Li mmseries 3281MM Series mouse (serial) 3282.It Li logitech 3283Logitech mouse (serial) 3284.It Li busmouse 3285A bus mouse 3286.It Li mouseman 3287Logitech MouseMan and TrackMan (serial) 3288.It Li glidepoint 3289ALPS GlidePoint (serial) 3290.It Li thinkingmouse 3291Kensington ThinkingMouse (serial) 3292.It Li ps/2 3293PS/2 mouse 3294.It Li mmhittab 3295MM HitTablet (serial) 3296.It Li x10mouseremote 3297X10 MouseRemote (serial) 3298.It Li versapad 3299Interlink VersaPad (serial) 3300.El 3301.Pp 3302Even if the mouse is not in the above list, it may be compatible 3303with one in the list. 3304Refer to the manual page for 3305.Xr moused 8 3306for compatibility information. 3307.Pp 3308It should also be noted that while this is enabled, any 3309other client of the mouse (such as an X server) should access 3310the mouse through the virtual mouse device, 3311.Pa /dev/sysmouse , 3312and configure it as a 3313.Dq Li sysmouse 3314type mouse, since all 3315mouse data is converted to this single canonical format when 3316using 3317.Xr moused 8 . 3318If the client program does not support the 3319.Dq Li sysmouse 3320type, 3321specify the 3322.Dq Li mousesystems 3323type. 3324It is the second preferred type. 3325.It Va moused_port 3326.Pq Vt str 3327If 3328.Va moused_enable 3329is set to 3330.Dq Li YES , 3331this is the actual port the mouse is on. 3332It might be 3333.Pa /dev/cuau0 3334for a COM1 serial mouse, 3335.Pa /dev/psm0 3336for a PS/2 mouse or 3337.Pa /dev/mse0 3338for a bus mouse, for example. 3339.It Va moused_flags 3340.Pq Vt str 3341If 3342.Va moused_flags 3343is set, its value is used as an additional set of flags to pass to the 3344.Xr moused 8 3345daemon. 3346.It Va "moused_" Ns Ar XXX Ns Va "_flags" 3347When 3348.Va moused_nondefault_enable 3349is enabled, and a 3350.Xr moused 8 3351daemon is started for a non-default port, the 3352.Va "moused_" Ns Ar XXX Ns Va "_flags" 3353set of options has precedence over and replaces the default 3354.Va moused_flags 3355(where 3356.Ar XXX 3357is the name of the non-default port, i.e.,\& 3358.Ar ums0 ) . 3359By setting 3360.Va "moused_" Ns Ar XXX Ns Va "_flags" 3361it is possible to set up a different set of default flags for each 3362.Xr moused 8 3363instance. 3364For example, you can use 3365.Dq Li "-3" 3366for the default 3367.Va moused_flags 3368to make your laptop's touchpad more comfortable to use, 3369but an empty set of options for 3370.Va moused_ums0_flags 3371when your 3372.Xr usb 4 3373mouse has three or more buttons. 3374.It Va mousechar_start 3375.Pq Vt int 3376If set to 3377.Dq Li NO , 3378the default mouse cursor character range 3379.Li 0xd0 Ns - Ns Li 0xd3 3380is used, 3381otherwise the range start is set 3382to 3383.Ar value 3384character, see 3385.Xr vidcontrol 1 . 3386Use if the default range is occupied in the language code table. 3387.It Va allscreens_flags 3388.Pq Vt str 3389If set, 3390.Xr vidcontrol 1 3391is run with these options for each of the virtual terminals 3392.Pq Pa /dev/ttyv* . 3393For example, 3394.Dq Fl m Cm on 3395will enable the mouse pointer on all virtual terminals 3396if 3397.Va moused_enable 3398is set to 3399.Dq Li YES . 3400.It Va allscreens_kbdflags 3401.Pq Vt str 3402If set, 3403.Xr kbdcontrol 1 3404is run with these options for each of the virtual terminals 3405.Pq Pa /dev/ttyv* . 3406For example, 3407.Dq Fl h Li 200 3408will set the 3409.Xr syscons 4 3410or 3411.Xr vt 4 3412scrollback (history) buffer to 200 lines. 3413.It Va cron_enable 3414.Pq Vt bool 3415If set to 3416.Dq Li YES , 3417run the 3418.Xr cron 8 3419daemon at system boot time. 3420.It Va cron_program 3421.Pq Vt str 3422Path to 3423.Xr cron 8 3424(default 3425.Pa /usr/sbin/cron ) . 3426.It Va cron_flags 3427.Pq Vt str 3428If 3429.Va cron_enable 3430is set to 3431.Dq Li YES , 3432these are the flags to pass to 3433.Xr cron 8 . 3434.It Va cron_dst 3435.Pq Vt bool 3436If set to 3437.Dq Li YES , 3438enable the special handling of transitions to and from the 3439Daylight Saving Time in 3440.Xr cron 8 3441(equivalent to using the flag 3442.Fl s ) . 3443.It Va lpd_program 3444.Pq Vt str 3445Path to 3446.Xr lpd 8 3447(default 3448.Pa /usr/sbin/lpd ) . 3449.It Va lpd_enable 3450.Pq Vt bool 3451If set to 3452.Dq Li YES , 3453run the 3454.Xr lpd 8 3455daemon at system boot time. 3456.It Va lpd_flags 3457.Pq Vt str 3458If 3459.Va lpd_enable 3460is set to 3461.Dq Li YES , 3462these are the flags to pass to the 3463.Xr lpd 8 3464daemon. 3465.It Va chkprintcap_enable 3466.Pq Vt bool 3467If set to 3468.Dq Li YES , 3469run the 3470.Xr chkprintcap 8 3471command before starting the 3472.Xr lpd 8 3473daemon. 3474.It Va chkprintcap_flags 3475.Pq Vt str 3476If 3477.Va lpd_enable 3478and 3479.Va chkprintcap_enable 3480are set to 3481.Dq Li YES , 3482these are the flags to pass to the 3483.Xr chkprintcap 8 3484program. 3485The default is 3486.Dq Li -d , 3487which causes missing directories to be created. 3488.It Va mta_start_script 3489.Pq Vt str 3490This variable specifies the full path to the script to run to start 3491a mail transfer agent. 3492The default is 3493.Pa /etc/rc.sendmail . 3494The 3495.Va sendmail_* 3496variables which 3497.Pa /etc/rc.sendmail 3498uses are documented in the 3499.Xr rc.sendmail 8 3500manual page. 3501.It Va dumpdev 3502.Pq Vt str 3503Indicates the device (usually a swap partition) to which a crash dump 3504should be written in the event of a system crash. 3505If the value of this variable is 3506.Dq Li AUTO , 3507the first suitable swap device listed in 3508.Pa /etc/fstab 3509will be used as dump device. 3510Otherwise, the value of this variable is passed as the argument to 3511.Xr dumpon 8 . 3512To disable crash dumps, set this variable to 3513.Dq Li NO . 3514.It Va dumpdir 3515.Pq Vt str 3516When the system reboots after a crash and a crash dump is found on the 3517device specified by the 3518.Va dumpdev 3519variable, 3520.Xr savecore 8 3521will save that crash dump and a copy of the kernel to the directory 3522specified by the 3523.Va dumpdir 3524variable. 3525The default value is 3526.Pa /var/crash . 3527Set to 3528.Dq Li NO 3529to not run 3530.Xr savecore 8 3531at boot time when 3532.Va dumpdir 3533is set. 3534.It Va savecore_enable 3535.Pq Vt bool 3536If set to 3537.Dq Li NO , 3538disable automatic extraction of the crash dump from the 3539.Va dumpdev . 3540.It Va savecore_flags 3541.Pq Vt str 3542If crash dumps are enabled, these are the flags to pass to the 3543.Xr savecore 8 3544utility. 3545.It Va quota_enable 3546.Pq Vt bool 3547Set to 3548.Dq Li YES 3549to turn on user and group disk quotas on system startup via the 3550.Xr quotaon 8 3551command for all file systems marked as having quotas enabled in 3552.Pa /etc/fstab . 3553The kernel must be built with 3554.Cd "options QUOTA" 3555for disk quotas to function. 3556.It Va check_quotas 3557.Pq Vt bool 3558Set to 3559.Dq Li YES 3560to enable user and group disk quota checking via the 3561.Xr quotacheck 8 3562command. 3563.It Va quotacheck_flags 3564.Pq Vt str 3565If 3566.Va quota_enable 3567is set to 3568.Dq Li YES , 3569and 3570.Va check_quotas 3571is set to 3572.Dq Li YES , 3573these are the flags to pass to the 3574.Xr quotacheck 8 3575utility. 3576The default is 3577.Dq Li "-a" , 3578which checks quotas for all file systems with quotas enabled in 3579.Pa /etc/fstab . 3580.It Va quotaon_flags 3581.Pq Vt str 3582If 3583.Va quota_enable 3584is set to 3585.Dq Li YES , 3586these are the flags to pass to the 3587.Xr quotaon 8 3588utility. 3589The default is 3590.Dq Li "-a" , 3591which enables quotas for all file systems with quotas enabled in 3592.Pa /etc/fstab . 3593.It Va quotaoff_flags 3594.Pq Vt str 3595If 3596.Va quota_enable 3597is set to 3598.Dq Li YES , 3599these are the flags to pass to the 3600.Xr quotaoff 8 3601utility when shutting down the quota system. 3602The default is 3603.Dq Li "-a" , 3604which disables quotas for all file systems with quotas enabled in 3605.Pa /etc/fstab . 3606.It Va accounting_enable 3607.Pq Vt bool 3608Set to 3609.Dq Li YES 3610to enable system accounting through the 3611.Xr accton 8 3612facility. 3613.It Va ibcs2_enable 3614.Pq Vt bool 3615Set to 3616.Dq Li YES 3617to enable iBCS2 (SCO) binary emulation at system initial boot 3618time. 3619.It Va ibcs2_loaders 3620.Pq Vt str 3621If not set to 3622.Dq Li NO 3623and if 3624.Va ibcs2_enable 3625is set to 3626.Dq Li YES , 3627this specifies a list of additional iBCS2 loaders to enable. 3628.It Va firstboot_sentinel 3629.Pq Vt str 3630This variable specifies the full path to a 3631.Dq first boot 3632sentinel file. 3633If a file exists with this path, 3634.Pa rc.d 3635scripts with the 3636.Dq firstboot 3637keyword will be run on startup and the sentinel file will be deleted 3638after the boot process completes. 3639The sentinel file must be located on a writable file system which is 3640mounted no later than 3641.Va early_late_divider 3642to function properly. 3643The default is 3644.Pa /firstboot . 3645.It Va linux_enable 3646.Pq Vt bool 3647Set to 3648.Dq Li YES 3649to enable Linux/ELF binary emulation at system initial 3650boot time. 3651.It Va svr4_enable 3652.Pq Vt bool 3653If set to 3654.Dq Li YES , 3655enable SysVR4 emulation at boot time. 3656.It Va sysvipc_enable 3657.Pq Vt bool 3658If set to 3659.Dq Li YES , 3660load System V IPC primitives at boot time. 3661.It Va clear_tmp_enable 3662.Pq Vt bool 3663Set to 3664.Dq Li YES 3665to have 3666.Pa /tmp 3667cleaned at startup. 3668.It Va clear_tmp_X 3669.Pq Vt bool 3670Set to 3671.Dq Li NO 3672to disable removing of X11 lock files, 3673and the removal and (secure) recreation 3674of the various socket directories for X11 3675related programs. 3676.It Va ldconfig_paths 3677.Pq Vt str 3678Set to the list of shared library paths to use with 3679.Xr ldconfig 8 . 3680NOTE: 3681.Pa /usr/lib 3682will always be added first, so it need not appear in this list. 3683.It Va ldconfig32_paths 3684.Pq Vt str 3685Set to the list of 32-bit compatibility shared library paths to 3686use with 3687.Xr ldconfig 8 . 3688.It Va ldconfig_paths_aout 3689.Pq Vt str 3690Set to the list of shared library paths to use with 3691.Xr ldconfig 8 3692legacy 3693.Xr a.out 5 3694support. 3695.It Va ldconfig_insecure 3696.Pq Vt bool 3697The 3698.Xr ldconfig 8 3699utility normally refuses to use directories 3700which are writable by anyone except root. 3701Set this variable to 3702.Dq Li YES 3703to disable that security check during system startup. 3704.It Va ldconfig_local_dirs 3705.Pq Vt str 3706Set to the list of local 3707.Xr ldconfig 8 3708directories. 3709The names of all files in the directories listed will be 3710passed as arguments to 3711.Xr ldconfig 8 . 3712.It Va ldconfig_local32_dirs 3713.Pq Vt str 3714Set to the list of local 32-bit compatibility 3715.Xr ldconfig 8 3716directories. 3717The names of all files in the directories listed will be 3718passed as arguments to 3719.Dq Nm ldconfig Fl 32 . 3720.It Va kern_securelevel_enable 3721.Pq Vt bool 3722Set to 3723.Dq Li YES 3724to set the kernel security level at system startup. 3725.It Va kern_securelevel 3726.Pq Vt int 3727The kernel security level to set at startup. 3728The allowed range of 3729.Ar value 3730ranges from \-1 (the compile time default) to 3 (the 3731most secure). 3732See 3733.Xr security 7 3734for the list of possible security levels and their effect 3735on system operation. 3736.It Va sshd_program 3737.Pq Vt str 3738Path to the SSH server program 3739.Pa ( /usr/sbin/sshd 3740is the default). 3741.It Va sshd_enable 3742.Pq Vt bool 3743Set to 3744.Dq Li YES 3745to start 3746.Xr sshd 8 3747at system boot time. 3748.It Va sshd_flags 3749.Pq Vt str 3750If 3751.Va sshd_enable 3752is set to 3753.Dq Li YES , 3754these are the flags to pass to the 3755.Xr sshd 8 3756daemon. 3757.It Va ftpd_program 3758.Pq Vt str 3759Path to the FTP server program 3760.Pa ( /usr/libexec/ftpd 3761is the default). 3762.It Va ftpd_enable 3763.Pq Vt bool 3764Set to 3765.Dq Li YES 3766to start 3767.Xr ftpd 8 3768as a stand-alone daemon at system boot time. 3769.It Va ftpd_flags 3770.Pq Vt str 3771If 3772.Va ftpd_enable 3773is set to 3774.Dq Li YES , 3775these are the additional flags to pass to the 3776.Xr ftpd 8 3777daemon. 3778.It Va watchdogd_enable 3779.Pq Vt bool 3780If set to 3781.Dq Li YES , 3782start the 3783.Xr watchdogd 8 3784daemon at boot time. 3785This requires that the kernel have been compiled with a 3786.Xr watchdog 4 3787compatible device. 3788.It Va watchdogd_flags 3789.Pq Vt str 3790If 3791.Va watchdogd_enable 3792is set to 3793.Dq Li YES , 3794these are the flags passed to the 3795.Xr watchdogd 8 3796daemon. 3797.It Va devfs_rulesets 3798.Pq Vt str 3799List of files containing sets of rules for 3800.Xr devfs 8 . 3801.It Va devfs_system_ruleset 3802.Pq Vt str 3803Rule name(s) to apply to the system 3804.Pa /dev 3805itself. 3806.It Va devfs_set_rulesets 3807.Pq Vt str 3808Pairs of already-mounted 3809.Pa dev 3810directories and rulesets that should be applied to them. 3811For example: /mount/dev=ruleset_name 3812.It Va devfs_load_rulesets 3813.Pq Vt bool 3814If set, always load the default rulesets listed in 3815.Va devfs_rulesets . 3816.It Va performance_cx_lowest 3817.Pq Vt str 3818CPU idle state to use while on AC power. 3819The string 3820.Dq Li LOW 3821indicates that 3822.Xr acpi 4 3823should use the lowest power state available while 3824.Dq Li HIGH 3825indicates that the lowest latency state (less power savings) should be used. 3826.It Va performance_cpu_freq 3827.Pq Vt str 3828CPU clock frequency to use while on AC power. 3829The string 3830.Dq Li LOW 3831indicates that 3832.Xr cpufreq 4 3833should use the lowest frequency available while 3834.Dq Li HIGH 3835indicates that the highest frequency (less power savings) should be used. 3836.It Va economy_cx_lowest 3837.Pq Vt str 3838CPU idle state to use when off AC power. 3839The string 3840.Dq Li LOW 3841indicates that 3842.Xr acpi 4 3843should use the lowest power state available while 3844.Dq Li HIGH 3845indicates that the lowest latency state (less power savings) should be used. 3846.It Va economy_cpu_freq 3847.Pq Vt str 3848CPU clock frequency to use when off AC power. 3849The string 3850.Dq Li LOW 3851indicates that 3852.Xr cpufreq 4 3853should use the lowest frequency available while 3854.Dq Li HIGH 3855indicates that the highest frequency (less power savings) should be used. 3856.It Va jail_enable 3857.Pq Vt bool 3858If set to 3859.Dq Li NO , 3860any configured jails will not be started. 3861.It Va jail_conf 3862.Pq Vt str 3863The configuration filename used by 3864.Xr jail 8 3865utility. 3866The default value is 3867.Pa /etc/jail.conf . 3868.It Va jail_parallel_start 3869.Pq Vt bool 3870If set to 3871.Dq Li YES , 3872all configured jails will be started in the background (in parallel). 3873.It Va jail_flags 3874.Pq Vt str 3875Unset by default. 3876When set, use as default value for 3877.Va jail_ Ns Ao Ar jname Ac Ns Va _flags 3878for every jail in 3879.Va jail_list . 3880.It Va jail_list 3881.Pq Vt str 3882A space-delimited list of jail names. 3883When left empty, all of the 3884.Xr jail 8 3885instances defined in the configuration file are started. 3886The names specified in this list control the jail startup order. 3887.Xr jail 8 3888instances missing from 3889.Va jail_list 3890must be started manually. 3891Note that a jail's 3892.Va depend 3893parameter in the configuration file may override this list. 3894.It Va jail_reverse_stop 3895.Pq Vt bool 3896When set to 3897.Dq Li YES , 3898all configured jails in 3899.Va jail_list 3900are stopped in reverse order. 3901.It Va jail_* variables 3902Note that older releases supported per-jail configuration via 3903.Nm 3904variables. 3905For example, 3906hostname of a jail named 3907.Li vjail 3908was able to be set by 3909.Li jail_vjail_hostname . 3910These per-jail configuration variables are now obsolete in favor of 3911.Xr jail 8 3912configuration file. 3913For backward compatibility, 3914when per-jail configuration variables are defined, 3915.Xr jail 8 3916configuration files are created as 3917.Pa /var/run/jail. Ns Ao Ar jname Ac Ns Pa .conf 3918and used. 3919.Pp 3920The following per-jail parameters are handled by 3921.Pa rc.d/jail 3922script out of their corresponding 3923.Nm 3924variables. 3925In addition to them, parameters in 3926.Va jail_ Ns Ao Ar jname Ac Ns Va _parameters 3927will be added to the configuration file. 3928They must be a semi-colon 3929.Pq Ql \&; 3930delimited list of 3931.Dq key=value . 3932For more details, 3933see 3934.Xr jail 8 3935manual page. 3936.Bl -tag -width "host.hostname" -offset indent 3937.It Li path 3938set from 3939.Va jail_ Ns Ao Ar jname Ac Ns Va _rootdir 3940.It Li host.hostname 3941set from 3942.Va jail_ Ns Ao Ar jname Ac Ns Va _hostname 3943.It Li exec.consolelog 3944set from 3945.Va jail_ Ns Ao Ar jname Ac Ns Va _consolelog . 3946The default value is 3947.Pa /var/log/jail_ Ao Ar jname Ac Pa _console.log . 3948.It Li interface 3949set from 3950.Va jail_ Ns Ao Ar jname Ac Ns Va _interface . 3951.It Li vnet.interface 3952set from 3953.Va jail_ Ns Ao Ar jname Ac Ns Va _vnet_interface . 3954This implies 3955.Li vnet 3956parameter will be enabled and cannot be specified with 3957.Va jail_ Ns Ao Ar jname Ac Ns Va _interface , 3958.Va jail_ Ns Ao Ar jname Ac Ns Va _ip 3959and/or 3960.Va jail_ Ns Ao Ar jname Ac Ns Va _ip_multi Ns Aq Ar n 3961at the same time. 3962.It Li fstab 3963set from 3964.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 3965.It Li mount 3966set from 3967.Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable . 3968.It Li exec.fib 3969set from 3970.Va jail_ Ns Ao Ar jname Ac Ns Va _fib 3971.It Li exec.start 3972set from 3973.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start . 3974The parameter name was 3975.Li command 3976in some older releases. 3977.It Li exec.prestart 3978set from 3979.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_prestart 3980.It Li exec.poststart 3981set from 3982.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_poststart 3983.It Li exec.stop 3984set from 3985.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop 3986.It Li exec.prestop 3987set from 3988.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_prestop 3989.It Li exec.poststop 3990set from 3991.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_poststop 3992.It Li ip4.addr 3993set if 3994.Va jail_ Ns Ao Ar jname Ac Ns Va _ip 3995or 3996.Va jail_ Ns Ao Ar jname Ac Ns Va _ip_multi Ns Aq Ar n 3997contain IPv4 addresses 3998.It Li ip6.addr 3999set if 4000.Va jail_ Ns Ao Ar jname Ac Ns Va _ip 4001or 4002.Va jail_ Ns Ao Ar jname Ac Ns Va _ip_multi Ns Aq Ar n 4003contain IPv6 addresses 4004.It Li allow.mount 4005set from 4006.Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable 4007.It Li mount.devfs 4008set from 4009.Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable 4010.It Li devfs_ruleset 4011set from 4012.Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_ruleset . 4013This must be an integer, 4014not a string. 4015.It Li mount.fdescfs 4016set from 4017.Va jail_ Ns Ao Ar jname Ac Ns Va _fdescfs_enable 4018.It Li allow.set_hostname 4019set from 4020.Va jail_ Ns Ao Ar jname Ac Ns Va _set_hostname_allow 4021.It Li allow.rawsocket 4022set from 4023.Va jail_ Ns Ao Ar jname Ac Ns Va _socket_unixiproute_only 4024.It Li allow.sysvipc 4025set from 4026.Va jail_ Ns Ao Ar jname Ac Ns Va _sysvipc_allow 4027.El 4028.\" ----------------------------------------------------- 4029.It Va harvest_mask 4030.Pq Vt int 4031Set to a bit-mask 4032representing the entropy sources 4033you wish to harvest. 4034Refer to 4035.Xr random 4 4036for more information. 4037.It Va entropy_dir 4038.Pq Vt str 4039Set to 4040.Dq Li NO 4041to disable caching entropy via 4042.Xr cron 8 . 4043Otherwise set to the directory 4044in which the entropy files are stored. 4045To be useful, 4046there must be 4047a system cron job 4048that regularly writes and rotates 4049files here. 4050All files found 4051will be used at boot time. 4052The default is 4053.Pa /var/db/entropy . 4054.It Va entropy_file 4055.Pq Vt str 4056Set to 4057.Dq Li NO 4058to disable caching entropy through reboots. 4059Otherwise set to the name 4060of a file used to store cached entropy. 4061This file should be located 4062on a file system that is readable 4063before all the volumes specified in 4064.Xr fstab 5 4065are mounted. 4066By default, 4067.Pa /entropy 4068is used, 4069but if 4070.Pa /var/db/entropy-file 4071is found it will also be used. 4072This will be of some use to 4073.Xr bsdinstall 8 . 4074.It Va entropy_boot_file 4075.Pq Vt str 4076Set to 4077.Dq Li NO 4078to disable 4079very early caching entropy 4080through reboots. 4081Otherwise set to the filename 4082used to read 4083very early reboot cached entropy. 4084This file should be located where 4085.Xr loader 8 4086can read it. 4087See also 4088.Xr loader.conf 5 . 4089The default location is 4090.Pa /boot/entropy . 4091.It Va entropy_save_sz 4092.Pq Vt int 4093Size of the entropy cache files saved by 4094.Nm save-entropy 4095periodically. 4096.It Va entropy_save_num 4097.Pq Vt int 4098Number of entropy cache files to save by 4099.Nm save-entropy 4100periodically. 4101.It Va ipsec_enable 4102.Pq Vt bool 4103Set to 4104.Dq Li YES 4105to run 4106.Xr setkey 8 4107on 4108.Va ipsec_file 4109at boot time. 4110.It Va ipsec_file 4111.Pq Vt str 4112Configuration file for 4113.Xr setkey 8 . 4114.It Va dmesg_enable 4115.Pq Vt bool 4116Set to 4117.Dq Li YES 4118to save 4119.Xr dmesg 8 4120to 4121.Pa /var/run/dmesg.boot 4122on boot. 4123.It Va rcshutdown_timeout 4124.Pq Vt int 4125If set, start a watchdog timer in the background which will terminate 4126.Pa rc.shutdown 4127if 4128.Xr shutdown 8 4129has not completed within the specified time (in seconds). 4130Notice that in addition to this soft timeout, 4131.Xr init 8 4132also applies a hard timeout for the execution of 4133.Pa rc.shutdown . 4134This is configured via 4135.Xr sysctl 8 4136variable 4137.Va kern.init_shutdown_timeout 4138and defaults to 120 seconds. 4139Setting the value of 4140.Va rcshutdown_timeout 4141to more than 120 seconds will have no effect until the 4142.Xr sysctl 8 4143variable 4144.Va kern.init_shutdown_timeout 4145is also increased. 4146.It Va virecover_enable 4147.Pq Vt bool 4148Set to 4149.Dq Li NO 4150to prevent the system from trying to 4151recover pre-maturely terminated 4152.Xr vi 1 4153sessions. 4154.It Va ugidfw_enable 4155.Pq Vt bool 4156Set to 4157.Dq Li YES 4158to load the 4159.Xr mac_bsdextended 4 4160module upon system initialization and load a default 4161ruleset file. 4162.It Va bsdextended_script 4163.Pq Vt str 4164The default 4165.Xr mac_bsdextended 4 4166ruleset file to load. 4167The default value of this variable is 4168.Pa /etc/rc.bsdextended . 4169.It Va newsyslog_enable 4170.Pq Vt bool 4171If set to 4172.Dq Li YES , 4173run 4174.Xr newsyslog 8 4175command at startup. 4176.It Va newsyslog_flags 4177.Pq Vt str 4178If 4179.Va newsyslog_enable 4180is set to 4181.Dq Li YES , 4182these are the flags to pass to the 4183.Xr newsyslog 8 4184program. 4185The default is 4186.Dq Li -CN , 4187which causes log files flagged with a 4188.Cm C 4189to be created. 4190.It Va mdconfig_md Ns Aq Ar X 4191.Pq Vt str 4192Arguments to 4193.Xr mdconfig 8 4194for 4195.Xr md 4 4196device 4197.Ar X . 4198At minimum a 4199.Fl t Ar type 4200must be specified and either a 4201.Fl s Ar size 4202for malloc or swap backed 4203.Xr md 4 4204devices or a 4205.Fl f Ar file 4206for vnode backed 4207.Xr md 4 4208devices. 4209Note that 4210.Va mdconfig_md Ns Aq Ar X 4211variables are evaluated until one variable is unset or null. 4212.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _newfs 4213.Pq Vt str 4214Optional arguments passed to 4215.Xr newfs 8 4216to initialize 4217.Xr md 4 4218device 4219.Ar X . 4220.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _owner 4221.Pq Vt str 4222An ownership specification passed to 4223.Xr chown 8 4224after the specified 4225.Xr md 4 4226device 4227.Ar X 4228has been mounted. 4229Both the 4230.Xr md 4 4231device and the mount point will be changed. 4232.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _perms 4233.Pq Vt str 4234A mode string passed to 4235.Xr chmod 1 4236after the specified 4237.Xr md 4 4238device 4239.Ar X 4240has been mounted. 4241Both the 4242.Xr md 4 4243device and the mount point will be changed. 4244.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _files 4245.Pq Vt str 4246Files to be copied to the mount point of the 4247.Xr md 4 4248device 4249.Ar X 4250after it has been mounted. 4251.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _cmd 4252.Pq Vt str 4253Command to execute after the specified 4254.Xr md 4 4255device 4256.Ar X 4257has been mounted. 4258Note that the command is passed to 4259.Ic eval 4260and that both 4261.Va _dev 4262and 4263.Va _mp 4264variables can be used to reference respectively the 4265.Xr md 4 4266device and the mount point. 4267Assuming that the 4268.Xr md 4 4269device is 4270.Li md0 , 4271one could set the following: 4272.Bd -literal 4273mdconfig_md0_cmd="tar xfzC /var/file.tgz \e${_mp}" 4274.Ed 4275.It Va autobridge_interfaces 4276.Pq Vt str 4277Set to the list of bridge interfaces that will have newly arriving interfaces 4278checked against to be automatically added. 4279If not set to 4280.Dq Li NO 4281then for each whitespace separated 4282.Ar element 4283in the value, a 4284.Va autobridge_ Ns Aq Ar element 4285variable is assumed to exist which has a whitespace separated list of interface 4286names to match, these names can use wildcards. 4287For example: 4288.Bd -literal 4289autobridge_interfaces="bridge0" 4290autobridge_bridge0="tap* dc0 vlan[345]" 4291.Ed 4292.It Va mixer_enable 4293.Pq Vt bool 4294If set to 4295.Dq Li YES , 4296enable support for sound mixer. 4297.It Va hcsecd_enable 4298.Pq Vt bool 4299If set to 4300.Dq Li YES , 4301enable Bluetooth security daemon. 4302.It Va hcsecd_config 4303.Pq Vt str 4304Configuration file for 4305.Xr hcsecd 8 . 4306Default 4307.Pa /etc/bluetooth/hcsecd.conf . 4308.It Va sdpd_enable 4309.Pq Vt bool 4310If set to 4311.Dq Li YES , 4312enable Bluetooth Service Discovery Protocol daemon. 4313.It Va sdpd_control 4314.Pq Vt str 4315Path to 4316.Xr sdpd 8 4317control socket. 4318Default 4319.Pa /var/run/sdp . 4320.It Va sdpd_groupname 4321.Pq Vt str 4322Sets 4323.Xr sdpd 8 4324group to run as after it initializes. 4325Default 4326.Dq Li nobody . 4327.It Va sdpd_username 4328.Pq Vt str 4329Sets 4330.Xr sdpd 8 4331user to run as after it initializes. 4332Default 4333.Dq Li nobody . 4334.It Va bthidd_enable 4335.Pq Vt bool 4336If set to 4337.Dq Li YES , 4338enable Bluetooth Human Interface Device daemon. 4339.It Va bthidd_config 4340.Pq Vt str 4341Configuration file for 4342.Xr bthidd 8 . 4343Default 4344.Pa /etc/bluetooth/bthidd.conf . 4345.It Va bthidd_hids 4346.Pq Vt str 4347Path to a file, where 4348.Xr bthidd 8 4349will store information about known HID devices. 4350Default 4351.Pa /var/db/bthidd.hids . 4352.It Va rfcomm_pppd_server_enable 4353.Pq Vt bool 4354If set to 4355.Dq Li YES , 4356enable Bluetooth RFCOMM PPP wrapper daemon. 4357.It Va rfcomm_pppd_server_profile 4358.Pq Vt str 4359The name of the profile to use from 4360.Pa /etc/ppp/ppp.conf . 4361Multiple profiles can be specified here. 4362Also used to specify per-profile overrides. 4363When the profile name contains any of the characters 4364.Dq Li .-/+ 4365they are translated to 4366.Dq Li _ 4367for the proposes of the override variable names. 4368.It Va rfcomm_pppd_server_ Ns Ao Ar profile Ac Ns _bdaddr 4369.Pq Vt str 4370Overrides local address to listen on. 4371By default 4372.Xr rfcomm_pppd 8 4373will listen on 4374.Dq Li ANY 4375address. 4376The address can be specified as BD_ADDR or name. 4377.It Va rfcomm_pppd_server_ Ns Ao Ar profile Ac Ns _channel 4378.Pq Vt str 4379Overrides local RFCOMM channel to listen on. 4380By default 4381.Xr rfcomm_pppd 8 4382will listen on RFCOMM channel 1. 4383Must set properly if multiple profiles used in the same time. 4384.It Va rfcomm_pppd_server_ Ns Ao Ar profile Ac Ns _register_sp 4385.Pq Vt bool 4386Tells 4387.Xr rfcomm_pppd 8 4388if it should register Serial Port service on the specified RFCOMM channel. 4389Default 4390.Dq Li NO . 4391.It Va rfcomm_pppd_server_ Ns Ao Ar profile Ac Ns _register_dun 4392.Pq Vt bool 4393Tells 4394.Xr rfcomm_pppd 8 4395if it should register Dial-Up Networking service on the specified 4396RFCOMM channel. 4397Default 4398.Dq Li NO . 4399.It Va ubthidhci_enable 4400.Pq Vt bool 4401If set to 4402.Dq Li YES , 4403change the USB Bluetooth controller from HID mode to HCI mode. 4404You also need to specify the location of USB Bluetooth controller with the 4405.Va ubthidhci_busnum 4406and 4407.Va ubthidhci_addr 4408variables. 4409.It Va ubthidhci_busnum 4410Bus number where the USB Bluetooth controller is located. 4411Check the output of 4412.Xr usbconfig 8 4413on your system to find this information. 4414.It Va ubthidhci_addr 4415Bus address of the USB Bluetooth controller. 4416Check the output of 4417.Xr usbconfig 8 4418on your system to find this information. 4419.It Va netwait_enable 4420.Pq Vt bool 4421If set to 4422.Dq Li YES , 4423delays the start of network-reliant services until 4424.Va netwait_if 4425is up and ICMP packets to a destination defined in 4426.Va netwait_ip 4427are flowing. 4428Link state is examined first, followed by 4429.Dq Li pinging 4430an IP address to verify network usability. 4431If no destination can be reached or timeouts are exceeded, 4432network services are started anyway with no guarantee that 4433the network is usable. 4434Use of this variable requires both 4435.Va netwait_ip 4436and 4437.Va netwait_if 4438to be set. 4439.It Va netwait_ip 4440.Pq Vt str 4441Empty by default. 4442This variable contains a space-delimited list of IP addresses to 4443.Xr ping 8 . 4444DNS hostnames should not be used as resolution is not guaranteed 4445to be functional at this point. 4446If multiple IP addresses are specified, 4447each will be tried until one is successful or the list is exhausted. 4448.It Va netwait_timeout 4449.Pq Vt int 4450Indicates the total number of seconds to perform a 4451.Dq Li ping 4452against each IP address in 4453.Va netwait_ip , 4454at a rate of one ping per second. 4455If any of the pings are successful, 4456full network connectivity is considered reliable. 4457The default is 60. 4458.It Va netwait_if 4459.Pq Vt str 4460Empty by default. 4461Defines the name of the network interface on which watch for link. 4462.Xr ifconfig 8 4463is used to monitor the interface, looking for 4464.Dq Li status: no carrier . 4465Once gone, the link is considered up. 4466This can be a 4467.Xr vlan 4 4468interface if desired. 4469.It Va netwait_if_timeout 4470.Pq Vt int 4471Defines the total number of seconds to wait for link to become usable, 4472polled at a 1-second interval. 4473The default is 30. 4474.It Va rctl_enable 4475.Pq Vt bool 4476If set to 4477.Dq Li YES , 4478load 4479.Xr rctl 8 4480rules from the defined ruleset. 4481The kernel must be built with 4482.Cd "options RACCT" 4483and 4484.Cd "options RCTL" . 4485.It Va rctl_rules 4486.Pq Vt str 4487Set to 4488.Pa /etc/rctl.conf 4489by default. 4490This variables contains the 4491.Xr rctl.conf 5 4492ruleset to load for 4493.Xr rctl 8 . 4494.It Va iovctl_files 4495.Pq Vt str 4496A space-separated list of configuration files used by 4497.Xr iovctl 8 . 4498The default value is an empty string. 4499.It Va autofs_enable 4500.Pq Vt bool 4501If set to 4502.Dq Li YES , 4503start the 4504.Xr automount 8 4505utility and the 4506.Xr automountd 8 4507and 4508.Xr autounmountd 8 4509daemons at boot time. 4510.It Va automount_flags 4511.Pq Vt str 4512If 4513.Va autofs_enable 4514is set to 4515.Dq Li YES , 4516these are the flags to pass to the 4517.Xr automount 8 4518program. 4519By default no flags are passed. 4520.It Va automountd_flags 4521.Pq Vt str 4522If 4523.Va autofs_enable 4524is set to 4525.Dq Li YES , 4526these are the flags to pass to the 4527.Xr automountd 8 4528daemon. 4529By default no flags are passed. 4530.It Va autounmountd_flags 4531.Pq Vt str 4532If 4533.Va autofs_enable 4534is set to 4535.Dq Li YES , 4536these are the flags to pass to the 4537.Xr autounmountd 8 4538daemon. 4539By default no flags are passed. 4540.It Va ctld_enable 4541.Pq Vt bool 4542If set to 4543.Dq Li YES , 4544start the 4545.Xr ctld 8 4546daemon at boot time. 4547.It Va iscsid_enable 4548.Pq Vt bool 4549If set to 4550.Dq Li YES , 4551start the 4552.Xr iscsid 8 4553daemon at boot time. 4554.It Va iscsictl_enable 4555.Pq Vt bool 4556If set to 4557.Dq Li YES , 4558start the 4559.Xr iscsictl 8 4560utility at boot time. 4561.It Va iscsictl_flags 4562.Pq Vt str 4563If 4564.Va iscsictl_enable 4565is set to 4566.Dq Li YES , 4567these are the flags to pass to the 4568.Xr iscsictl 8 4569program. 4570The default is 4571.Dq Li -Aa , 4572which configures sessions based on the 4573.Pa /etc/iscsi.conf 4574configuration file. 4575.El 4576.Sh FILES 4577.Bl -tag -width ".Pa /etc/defaults/rc.conf" -compact 4578.It Pa /etc/defaults/rc.conf 4579.It Pa /etc/rc.conf 4580.It Pa /etc/rc.conf.local 4581.El 4582.Sh SEE ALSO 4583.Xr catman 1 , 4584.Xr chmod 1 , 4585.Xr gdb 1 , 4586.Xr info 1 , 4587.Xr kbdcontrol 1 , 4588.Xr makewhatis 1 , 4589.Xr sh 1 , 4590.Xr vi 1 , 4591.Xr vidcontrol 1 , 4592.Xr bridge 4 , 4593.Xr dummynet 4 , 4594.Xr ip 4 , 4595.Xr ipf 4 , 4596.Xr ipfw 4 , 4597.Xr ipnat 4 , 4598.Xr kld 4 , 4599.Xr pf 4 , 4600.Xr pflog 4 , 4601.Xr pfsync 4 , 4602.Xr tcp 4 , 4603.Xr udp 4 , 4604.Xr exports 5 , 4605.Xr fstab 5 , 4606.Xr ipf 5 , 4607.Xr ipnat 5 , 4608.Xr jail.conf 5 , 4609.Xr loader.conf 5 , 4610.Xr motd 5 , 4611.Xr newsyslog.conf 5 , 4612.Xr pf.conf 5 , 4613.Xr security 7 , 4614.Xr accton 8 , 4615.Xr amd 8 , 4616.Xr apm 8 , 4617.Xr atm 8 , 4618.Xr bsdinstall 8 , 4619.Xr bthidd 8 , 4620.Xr chkprintcap 8 , 4621.Xr chown 8 , 4622.Xr cron 8 , 4623.Xr devfs 8 , 4624.Xr dhclient 8 , 4625.Xr ftpd 8 , 4626.Xr geli 8 , 4627.Xr hcsecd 8 , 4628.Xr ifconfig 8 , 4629.Xr inetd 8 , 4630.Xr iovctl 8 , 4631.Xr ipf 8 , 4632.Xr ipfw 8 , 4633.Xr ipnat 8 , 4634.Xr jail 8 , 4635.Xr kldxref 8 , 4636.Xr loader 8 , 4637.Xr lpd 8 , 4638.Xr mdconfig 8 , 4639.Xr mdmfs 8 , 4640.Xr mixer 8 , 4641.Xr mountd 8 , 4642.Xr moused 8 , 4643.Xr newfs 8 , 4644.Xr newsyslog 8 , 4645.Xr nfsd 8 , 4646.Xr ntpd 8 , 4647.Xr ntpdate 8 , 4648.Xr pfctl 8 , 4649.Xr pflogd 8 , 4650.Xr ping 8 , 4651.Xr powerd 8 , 4652.Xr quotacheck 8 , 4653.Xr quotaon 8 , 4654.Xr rc 8 , 4655.Xr rc.sendmail 8 , 4656.Xr rfcomm_pppd 8 , 4657.Xr route 8 , 4658.Xr routed 8 , 4659.Xr rpc.lockd 8 , 4660.Xr rpc.statd 8 , 4661.Xr rpcbind 8 , 4662.Xr rwhod 8 , 4663.Xr savecore 8 , 4664.Xr sdpd 8 , 4665.Xr sshd 8 , 4666.Xr swapon 8 , 4667.Xr sysctl 8 , 4668.Xr syslogd 8 , 4669.Xr timed 8 , 4670.Xr unbound 8 , 4671.Xr usbconfig 8 , 4672.Xr wlandebug 8 , 4673.Xr yp 8 , 4674.Xr ypbind 8 , 4675.Xr ypserv 8 , 4676.Xr ypset 8 4677.Sh HISTORY 4678The 4679.Nm 4680file appeared in 4681.Fx 2.2.2 . 4682.Sh AUTHORS 4683.An Jordan K. Hubbard . 4684