1.\" Copyright (c) 1995 2.\" Jordan K. Hubbard 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND 14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 16.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE 17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23.\" SUCH DAMAGE. 24.\" 25.\" $FreeBSD$ 26.\" 27.Dd June 9, 2013 28.Dt RC.CONF 5 29.Os 30.Sh NAME 31.Nm rc.conf 32.Nd system configuration information 33.Sh DESCRIPTION 34The file 35.Nm 36contains descriptive information about the local host name, configuration 37details for any potential network interfaces and which services should be 38started up at system initial boot time. 39In new installations, the 40.Nm 41file is generally initialized by the system installation utility. 42.Pp 43The purpose of 44.Nm 45is not to run commands or perform system startup actions 46directly. 47Instead, it is included by the 48various generic startup scripts in 49.Pa /etc 50which conditionalize their 51internal actions according to the settings found there. 52.Pp 53The 54.Pa /etc/rc.conf 55file is included from the file 56.Pa /etc/defaults/rc.conf , 57which specifies the default settings for all the available options. 58Options need only be specified in 59.Pa /etc/rc.conf 60when the system administrator wishes to override these defaults. 61The file 62.Pa /etc/rc.conf.local 63is used to override settings in 64.Pa /etc/rc.conf 65for historical reasons. 66In addition to 67.Pa /etc/rc.conf.local 68you can also place smaller configuration files for each 69.Xr rc 8 70script in the 71.Pa /etc/rc.conf.d 72directory, which will be included by the 73.Va load_rc_config 74function. 75For jail configurations you could use the file 76.Pa /etc/rc.conf.d/jail 77to store jail specific configuration options. 78Also see the 79.Va rc_conf_files 80variable below. 81.Pp 82Options are set with 83.Dq Ar name Ns Li = Ns Ar value 84assignments that use 85.Xr sh 1 86syntax. 87The following list provides a name and short description for each 88variable that can be set in the 89.Nm 90file: 91.Bl -tag -width indent-two 92.It Va rc_debug 93.Pq Vt bool 94If set to 95.Dq Li YES , 96enable output of debug messages from rc scripts. 97This variable can be helpful in diagnosing mistakes when 98editing or integrating new scripts. 99Beware that this produces copious output to the terminal and 100.Xr syslog 3 . 101.It Va rc_info 102.Pq Vt bool 103If set to 104.Dq Li NO , 105disable informational messages from the rc scripts. 106Informational messages are displayed when 107a condition that is not serious enough to warrant a warning or 108an error occurs. 109.It Va rc_startmsgs 110.Pq Vt bool 111If set to 112.Dq Li YES , 113show 114.Dq Starting foo: 115when faststart is used (e.g., at boot time). 116.It Va early_late_divider 117.Pq Vt str 118The name of the script that should be used as the 119delimiter between the 120.Dq early 121and 122.Dq late 123stages of the boot process. 124The early stage should contain all the services needed to 125get the disks (local or remote) mounted so that the late 126stage can include scripts contained in the directories 127listed in the 128.Va local_startup 129variable (see below). 130Thus, the two likely candidates for this value are 131.Pa mountcritlocal 132for the typical system, and 133.Pa mountcritremote 134if the system needs remote file 135systems mounted to get access to the 136.Va local_startup 137directories; for example when 138.Pa /usr/local 139is NFS mounted. 140For 141.Pa rc.conf 142within a 143.Xr jail 8 144.Pa NETWORKING 145is likely to be an appropriate value. 146Extreme care should be taken when changing this value, 147and before changing it one should ensure that there are 148adequate provisions to recover from a failed boot 149(such as physical contact with the machine, 150or reliable remote console access). 151.It Va always_force_depends 152.Pq Vt bool 153Various 154.Pa rc.d 155scripts use the force_depend function to check whether required 156services are already running, and to start them if necessary. 157By default during boot time this check is bypassed if the 158required service is enabled in 159.Pa /etc/rc.conf[.local] . 160Setting this option will bypass that check at boot time and 161always test whether or not the service is actually running. 162Enabling this option is likely to increase your boot time if 163services are enabled that utilize the force_depend check. 164.It Va swapfile 165.Pq Vt str 166If set to 167.Dq Li NO , 168no swapfile is installed, otherwise the value is used as the full 169pathname to a file to use for additional swap space. 170.It Ao Ar name Ac Ns Va _chroot 171.Pq Vt str 172.Xr chroot 173to this directory before running the service. 174.It Ao Ar name Ac Ns Va _user 175.Pq Vt str 176Run the service under this user account. 177.It Ao Ar name Ac Ns Va _group 178.Pq Vt str 179Run the chrooted service under this system group. Unlike the _user 180setting, this setting has no effect if the service is not chrooted. 181.It Ao Ar name Ac Ns Va _fib 182.Pq Vt int 183The 184.Xr setfib 1 185value to run the service under. 186.It Ao Ar name Ac Ns Va _nice 187.Pq Vt int 188The 189.Xr nice 1 190value to run the service under. 191.It Va apm_enable 192.Pq Vt bool 193If set to 194.Dq Li YES , 195enable support for Automatic Power Management with 196the 197.Xr apm 8 198command. 199.It Va apmd_enable 200.Pq Vt bool 201Run 202.Xr apmd 8 203to handle APM event from userland. 204This also enables support for APM. 205.It Va apmd_flags 206.Pq Vt str 207If 208.Va apmd_enable 209is set to 210.Dq Li YES , 211these are the flags to pass to the 212.Xr apmd 8 213daemon. 214.It Va devd_enable 215.Pq Vt bool 216Run 217.Xr devd 8 218to handle device added, removed or unknown events from the kernel. 219.It Va ddb_enable 220.Pq Vt bool 221Run 222.Xr ddb 8 223to install 224.Xr ddb 4 225scripts at boot time. 226.It Va ddb_config 227.Pq Vt str 228Configuration file for 229.Xr ddb 8 . 230Default 231.Pa /etc/ddb.conf . 232.It Va kld_list 233.Pq Vt str 234A list of kernel modules to load right after the local 235disks are mounted. 236Loading modules at this point in the boot process is 237much faster than doing it via 238.Pa /boot/loader.conf 239for those modules not necessary for mounting local disk. 240.It Va kldxref_enable 241.Pq Vt bool 242Set to 243.Dq Li NO 244by default. 245Set to 246.Dq Li YES 247to automatically rebuild 248.Pa linker.hints 249files with 250.Xr kldxref 8 251at boot time. 252.It Va kldxref_clobber 253.Pq Vt bool 254Set to 255.Dq Li NO 256by default. 257If 258.Va kldxref_enable 259is true, 260setting to 261.Dq Li YES 262will overwrite existing 263.Pa linker.hints 264files at boot time. 265Otherwise, 266only missing 267.Pa linker.hints 268files are generated. 269.It Va kldxref_module_path 270.Pq Vt str 271Empty by default. 272A semi-colon 273.Pq Ql \&; 274delimited list of paths containing 275.Xr kld 4 276modules. 277If empty, 278the contents of the 279.Va kern.module_path 280.Xr sysctl 8 281are used. 282.It Va powerd_enable 283.Pq Vt bool 284If set to 285.Dq Li YES , 286enable the system power control facility with the 287.Xr powerd 8 288daemon. 289.It Va powerd_flags 290.Pq Vt str 291If 292.Va powerd_enable 293is set to 294.Dq Li YES , 295these are the flags to pass to the 296.Xr powerd 8 297daemon. 298.It Va tmpmfs 299Controls the creation of a 300.Pa /tmp 301memory file system. 302Always happens if set to 303.Dq Li YES 304and never happens if set to 305.Dq Li NO . 306If set to anything else, a memory file system is created if 307.Pa /tmp 308is not writable. 309.It Va tmpsize 310Controls the size of a created 311.Pa /tmp 312memory file system. 313.It Va tmpmfs_flags 314Extra options passed to the 315.Xr mdmfs 8 316utility when the memory file system for 317.Pa /tmp 318is created. 319The default is 320.Dq Li "-S" , 321which inhibits the use of softupdates on 322.Pa /tmp 323so that file system space is freed without delay 324after file truncation or deletion. 325See 326.Xr mdmfs 8 327for other options you can use in 328.Va tmpmfs_flags . 329.It Va varmfs 330Controls the creation of a 331.Pa /var 332memory file system. 333Always happens if set to 334.Dq Li YES 335and never happens if set to 336.Dq Li NO . 337If set to anything else, a memory file system is created if 338.Pa /var 339is not writable. 340.It Va varsize 341Controls the size of a created 342.Pa /var 343memory file system. 344.It Va varmfs_flags 345Extra options passed to the 346.Xr mdmfs 8 347utility when the memory file system for 348.Pa /var 349is created. 350The default is 351.Dq Li "-S" , 352which inhibits the use of softupdates on 353.Pa /var 354so that file system space is freed without delay 355after file truncation or deletion. 356See 357.Xr mdmfs 8 358for other options you can use in 359.Va varmfs_flags . 360.It Va populate_var 361Controls the automatic population of the 362.Pa /var 363file system. 364Always happens if set to 365.Dq Li YES 366and never happens if set to 367.Dq Li NO . 368If set to anything else, a memory file system is created if 369.Pa /var 370is not writable. 371Note that this process requires access to certain commands in 372.Pa /usr 373before 374.Pa /usr 375is mounted on normal systems. 376.It Va cleanvar_enable 377.Pq Vt bool 378Clean the 379.Pa /var 380directory. 381.It Va local_startup 382.Pq Vt str 383List of directories to search for startup script files. 384.It Va script_name_sep 385.Pq Vt str 386The field separator to use for breaking down the list of startup script files 387into individual filenames. 388The default is a space. 389It is not necessary to change this unless there are startup scripts with names 390containing spaces. 391.It Va hostapd_enable 392.Pq Vt bool 393Set to 394.Dq Li YES 395to start 396.Xr hostapd 8 397at system boot time. 398.It Va hostname 399.Pq Vt str 400The fully qualified domain name (FQDN) of this host on the network. 401This should almost certainly be set to something meaningful, even if 402there is no network connection. 403If 404.Xr dhclient 8 405is used to set the hostname via DHCP, 406this variable should be set to an empty string. 407If this value remains unset when the system is done booting 408your console login will display the default hostname of 409.Dq Amnesiac . 410.It Va nisdomainname 411.Pq Vt str 412The NIS domain name of this host, or 413.Dq Li NO 414if NIS is not used. 415.It Va dhclient_program 416.Pq Vt str 417Path to the DHCP client program 418.Pa ( /sbin/dhclient , 419the 420.Ox 421DHCP client, 422is the default). 423.It Va dhclient_flags 424.Pq Vt str 425Additional flags to pass to the DHCP client program. 426For the 427.Ox 428DHCP client, see the 429.Xr dhclient 8 430manpage for a description of the command line options available. 431.It Va dhclient_flags_ Ns Aq Ar iface 432Additional flags to pass to the DHCP client program running on 433.Ar iface 434only. 435When specified, this variable overrides 436.Va dhclient_flags . 437.It Va background_dhclient 438.Pq Vt bool 439Set to 440.Dq Li YES 441to start the DHCP client in background. 442This can cause trouble with applications depending on 443a working network, but it will provide a faster startup 444in many cases. 445.It Va background_dhclient_ Ns Aq Ar iface 446When specified, this variable overrides the 447.Va background_dhclient 448variable for interface 449.Ar iface 450only. 451.It Va synchronous_dhclient 452.Pq Vt bool 453Set to 454.Dq Li YES 455to start 456.Xr dhclient 8 457synchronously at startup. 458This behavior can be overridden on a per-interface basis by replacing 459the 460.Dq Li DHCP 461keyword in the 462.Va ifconfig_ Ns Aq Ar interface 463variable with 464.Dq Li SYNCDHCP 465or 466.Dq Li NOSYNCDHCP . 467.It Va defaultroute_delay 468.Pq Vt int 469When set to a positive value, wait up to this long after configuring 470DHCP interfaces at startup to give the interfaces time to receive a lease. 471.It Va firewall_enable 472.Pq Vt bool 473Set to 474.Dq Li YES 475to load firewall rules at startup. 476If the kernel was not built with 477.Cd "options IPFIREWALL" , 478the 479.Pa ipfw.ko 480kernel module will be loaded. 481See also 482.Va ipfilter_enable . 483.It Va firewall_script 484.Pq Vt str 485This variable specifies the full path to the firewall script to run. 486The default is 487.Pa /etc/rc.firewall . 488.It Va firewall_type 489.Pq Vt str 490Names the firewall type from the selection in 491.Pa /etc/rc.firewall , 492or the file which contains the local firewall ruleset. 493Valid selections from 494.Pa /etc/rc.firewall 495are: 496.Pp 497.Bl -tag -width ".Li simple" -compact 498.It Li open 499unrestricted IP access 500.It Li closed 501all IP services disabled, except via 502.Dq Li lo0 503.It Li client 504basic protection for a workstation 505.It Li simple 506basic protection for a LAN. 507.El 508.Pp 509If a filename is specified, the full path 510must be given. 511.It Va firewall_quiet 512.Pq Vt bool 513Set to 514.Dq Li YES 515to disable the display of firewall rules on the console during boot. 516.It Va firewall_logging 517.Pq Vt bool 518Set to 519.Dq Li YES 520to enable firewall event logging. 521This is equivalent to the 522.Dv IPFIREWALL_VERBOSE 523kernel option. 524.It Va firewall_logif 525.Pq Vt bool 526Set to 527.Dq Li YES 528to create pseudo interface 529.Li ipfw0 530for logging. 531For more details, see 532.Xr ipfw 8 533manual page. 534.It Va firewall_flags 535.Pq Vt str 536Flags passed to 537.Xr ipfw 8 538if 539.Va firewall_type 540specifies a filename. 541.It Va firewall_coscripts 542.Pq Vt str 543List of executables and/or rc scripts to run after firewall starts/stops. 544Default is empty. 545.\" ----- firewall_nat_enable setting -------------------------------- 546.It Va firewall_nat_enable 547.Pq Vt bool 548The 549.Xr ipfw 8 550equivalent of 551.Va natd_enable . 552Setting this to 553.Dq Li YES 554enables kernel NAT. 555.Va firewall_enable 556must also be set to 557.Dq Li YES . 558.It Va firewall_nat_interface 559.Pq Vt str 560The 561.Xr ipfw 8 562equivalent of 563.Va natd_interface . 564This is the name of the public interface or IP address on which 565kernel NAT should run. 566.It Va firewall_nat_flags 567.Pq Vt str 568Additional configuration parameters for kernel NAT should be placed here. 569.It Va dummynet_enable 570.Pq Vt bool 571Setting this to 572.Dq Li YES 573will automatically load the 574.Xr dummynet 4 575module if 576.Va firewall_enable 577is also set to 578.Dq Li YES . 579.\" ------------------------------------------------------------------- 580.It Va natd_program 581.Pq Vt str 582Path to 583.Xr natd 8 . 584.It Va natd_enable 585.Pq Vt bool 586Set to 587.Dq Li YES 588to enable 589.Xr natd 8 . 590.Va firewall_enable 591must also be set to 592.Dq Li YES , 593and 594.Xr divert 4 595sockets must be enabled in the kernel. 596If the kernel was not built with 597.Cd "options IPDIVERT" , 598the 599.Pa ipdivert.ko 600kernel module will be loaded. 601.It Va natd_interface 602.Pq Vt str 603This is the name of the public interface on which 604.Xr natd 8 605should run. 606The interface may be given as an interface name or as an IP address. 607.It Va natd_flags 608.Pq Vt str 609Additional 610.Xr natd 8 611flags should be placed here. 612The 613.Fl n 614or 615.Fl a 616flag is automatically added with the above 617.Va natd_interface 618as an argument. 619.\" ----- ipfilter_enable setting -------------------------------- 620.It Va ipfilter_enable 621.Pq Vt bool 622Set to 623.Dq Li NO 624by default. 625Setting this to 626.Dq Li YES 627enables 628.Xr ipf 8 629packet filtering. 630.Pp 631Typical usage will require putting 632.Bd -literal 633ipfilter_enable="YES" 634ipnat_enable="YES" 635ipmon_enable="YES" 636ipfs_enable="YES" 637.Ed 638.Pp 639into 640.Pa /etc/rc.conf 641and editing 642.Pa /etc/ipf.rules 643and 644.Pa /etc/ipnat.rules 645appropriately. 646.Pp 647Note that 648.Va ipfilter_enable 649and 650.Va ipnat_enable 651can be enabled independently. 652.Va ipmon_enable 653and 654.Va ipfs_enable 655both require at least one of 656.Va ipfilter_enable 657and 658.Va ipnat_enable 659to be enabled. 660.Pp 661Having 662.Bd -literal 663options IPFILTER 664options IPFILTER_LOG 665options IPFILTER_DEFAULT_BLOCK 666.Ed 667.Pp 668in the kernel configuration file is a good idea, too. 669.\" ----- ipfilter_program setting ------------------------------ 670.It Va ipfilter_program 671.Pq Vt str 672Path to 673.Xr ipf 8 674(default 675.Pa /sbin/ipf ) . 676.\" ----- ipfilter_rules setting -------------------------------- 677.It Va ipfilter_rules 678.Pq Vt str 679Set to 680.Pa /etc/ipf.rules 681by default. 682This variable contains the name of the filter rule definition file. 683The file is expected to be readable for the 684.Xr ipf 8 685command to execute. 686.\" ----- ipv6_ipfilter_rules setting --------------------------- 687.It Va ipv6_ipfilter_rules 688.Pq Vt str 689Set to 690.Pa /etc/ipf6.rules 691by default. 692This variable contains the IPv6 filter rule definition file. 693The file is expected to be readable for the 694.Xr ipf 8 695command to execute. 696.\" ----- ipfilter_flags setting -------------------------------- 697.It Va ipfilter_flags 698.Pq Vt str 699Empty by default. 700This variable contains flags passed to the 701.Xr ipf 8 702program. 703.\" ----- ipnat_enable setting ---------------------------------- 704.It Va ipnat_enable 705.Pq Vt bool 706Set to 707.Dq Li NO 708by default. 709Set it to 710.Dq Li YES 711to enable 712.Xr ipnat 8 713network address translation. 714See 715.Va ipfilter_enable 716for a detailed discussion. 717.\" ----- ipnat_program setting --------------------------------- 718.It Va ipnat_program 719.Pq Vt str 720Path to 721.Xr ipnat 8 722(default 723.Pa /sbin/ipnat ) . 724.\" ----- ipnat_rules setting ----------------------------------- 725.It Va ipnat_rules 726.Pq Vt str 727Set to 728.Pa /etc/ipnat.rules 729by default. 730This variable contains the name of the file 731holding the network address translation definition. 732This file is expected to be readable for the 733.Xr ipnat 8 734command to execute. 735.\" ----- ipnat_flags setting ----------------------------------- 736.It Va ipnat_flags 737.Pq Vt str 738Empty by default. 739This variable contains flags passed to the 740.Xr ipnat 8 741program. 742.\" ----- ipmon_enable setting ---------------------------------- 743.It Va ipmon_enable 744.Pq Vt bool 745Set to 746.Dq Li NO 747by default. 748Set it to 749.Dq Li YES 750to enable 751.Xr ipmon 8 752monitoring (logging 753.Xr ipf 8 754and 755.Xr ipnat 8 756events). 757Setting this variable needs setting 758.Va ipfilter_enable 759or 760.Va ipnat_enable 761too. 762See 763.Va ipfilter_enable 764for a detailed discussion. 765.\" ----- ipmon_program setting --------------------------------- 766.It Va ipmon_program 767.Pq Vt str 768Path to 769.Xr ipmon 8 770(default 771.Pa /sbin/ipmon ) . 772.\" ----- ipmon_flags setting ----------------------------------- 773.It Va ipmon_flags 774.Pq Vt str 775Set to 776.Dq Li -Ds 777by default. 778This variable contains flags passed to the 779.Xr ipmon 8 780program. 781Another typical example would be 782.Dq Fl D Pa /var/log/ipflog 783to have 784.Xr ipmon 8 785log directly to a file bypassing 786.Xr syslogd 8 . 787Make sure to adjust 788.Pa /etc/newsyslog.conf 789in such case like this: 790.Bd -literal 791/var/log/ipflog 640 10 100 * Z /var/run/ipmon.pid 792.Ed 793.\" ----- ipfs_enable setting ----------------------------------- 794.It Va ipfs_enable 795.Pq Vt bool 796Set to 797.Dq Li NO 798by default. 799Set it to 800.Dq Li YES 801to enable 802.Xr ipfs 8 803saving the filter and NAT state tables during shutdown 804and reloading them during startup again. 805Setting this variable needs setting 806.Va ipfilter_enable 807or 808.Va ipnat_enable 809to 810.Dq Li YES 811too. 812See 813.Va ipfilter_enable 814for a detailed discussion. 815Note that if 816.Va kern_securelevel 817is set to 3, 818.Va ipfs_enable 819cannot be used 820because the raised securelevel will prevent 821.Xr ipfs 8 822from saving the state tables at shutdown time. 823.\" ----- ipfs_program setting ---------------------------------- 824.It Va ipfs_program 825.Pq Vt str 826Path to 827.Xr ipfs 8 828(default 829.Pa /sbin/ipfs ) . 830.\" ----- ipfs_flags setting ------------------------------------ 831.It Va ipfs_flags 832.Pq Vt str 833Empty by default. 834This variable contains flags passed to the 835.Xr ipfs 8 836program. 837.\" ----- end of added ipf hook --------------------------------- 838.It Va pf_enable 839.Pq Vt bool 840Set to 841.Dq Li NO 842by default. 843Setting this to 844.Dq Li YES 845enables 846.Xr pf 4 847packet filtering. 848.Pp 849Typical usage will require putting 850.Pp 851.Dl pf_enable="YES" 852.Pp 853into 854.Pa /etc/rc.conf 855and editing 856.Pa /etc/pf.conf 857appropriately. 858Adding 859.Pp 860.Dl "device pf" 861.Pp 862builds support for 863.Xr pf 4 864into the kernel, otherwise the 865kernel module will be loaded. 866.It Va pf_rules 867.Pq Vt str 868Path to 869.Xr pf 4 870ruleset configuration file 871(default 872.Pa /etc/pf.conf ) . 873.It Va pf_program 874.Pq Vt str 875Path to 876.Xr pfctl 8 877(default 878.Pa /sbin/pfctl ) . 879.It Va pf_flags 880.Pq Vt str 881If 882.Va pf_enable 883is set to 884.Dq Li YES , 885these flags are passed to the 886.Xr pfctl 8 887program when loading the ruleset. 888.It Va pflog_enable 889.Pq Vt bool 890Set to 891.Dq Li NO 892by default. 893Setting this to 894.Dq Li YES 895enables 896.Xr pflogd 8 897which logs packets from the 898.Xr pf 4 899packet filter. 900.It Va pflog_logfile 901.Pq Vt str 902If 903.Va pflog_enable 904is set to 905.Dq Li YES 906this controls where 907.Xr pflogd 8 908stores the logfile 909(default 910.Pa /var/log/pflog ) . 911Check 912.Pa /etc/newsyslog.conf 913to adjust logfile rotation for this. 914.It Va pflog_program 915.Pq Vt str 916Path to 917.Xr pflogd 8 918(default 919.Pa /sbin/pflogd ) . 920.It Va pflog_flags 921.Pq Vt str 922Empty by default. 923This variable contains additional flags passed to the 924.Xr pflogd 8 925program. 926.It Va ftpproxy_enable 927.Pq Vt bool 928Set to 929.Dq Li NO 930by default. 931Setting this to 932.Dq Li YES 933enables 934.Xr ftp-proxy 8 935which supports the 936.Xr pf 4 937packet filter in translating ftp connections. 938.It Va ftpproxy_flags 939.Pq Vt str 940Empty by default. 941This variable contains additional flags passed to the 942.Xr ftp-proxy 8 943program. 944.It Va pfsync_enable 945.Pq Vt bool 946Set to 947.Dq Li NO 948by default. 949Setting this to 950.Dq Li YES 951enables exposing 952.Xr pf 4 953state changes to other hosts over the network by means of 954.Xr pfsync 4 . 955The 956.Va pfsync_syncdev 957variable 958must also be set then. 959.It Va pfsync_syncdev 960.Pq Vt str 961Empty by default. 962This variable specifies the name of the network interface 963.Xr pfsync 4 964should operate through. 965It must be set accordingly if 966.Va pfsync_enable 967is set to 968.Dq Li YES . 969.It Va pfsync_syncpeer 970.Pq Vt str 971Empty by default. 972This variable is optional. 973By default, state change messages are sent out on the synchronisation 974interface using IP multicast packets. 975The protocol is IP protocol 240, PFSYNC, and the multicast group used is 976224.0.0.240. 977When a peer address is specified using the 978.Va pfsync_syncpeer 979option, the peer address is used as a destination for the pfsync 980traffic, and the traffic can then be protected using 981.Xr ipsec 4 . 982See the 983.Xr pfsync 4 984manpage for more details about using 985.Xr ipsec 4 986with 987.Xr pfsync 4 988interfaces. 989.It Va pfsync_ifconfig 990.Pq Vt str 991Empty by default. 992This variable can contain additional options to be passed to the 993.Xr ifconfig 8 994command used to set up 995.Xr pfsync 4 . 996.It Va tcp_extensions 997.Pq Vt bool 998Set to 999.Dq Li YES 1000by default. 1001Setting this to 1002.Dq Li NO 1003disables certain TCP options as described by 1004.Rs 1005.%T "RFC 1323" 1006.Re 1007Setting this to 1008.Dq Li NO 1009might help remedy such problems with connections as randomly hanging 1010or other weird behavior. 1011Some network devices are known 1012to be broken with respect to these options. 1013.It Va log_in_vain 1014.Pq Vt int 1015Set to 0 by default. 1016The 1017.Xr sysctl 8 1018variables, 1019.Va net.inet.tcp.log_in_vain 1020and 1021.Va net.inet.udp.log_in_vain , 1022as described in 1023.Xr tcp 4 1024and 1025.Xr udp 4 , 1026are set to the given value. 1027.It Va tcp_keepalive 1028.Pq Vt bool 1029Set to 1030.Dq Li YES 1031by default. 1032Setting to 1033.Dq Li NO 1034will disable probing idle TCP connections to verify that the 1035peer is still up and reachable. 1036.It Va tcp_drop_synfin 1037.Pq Vt bool 1038Set to 1039.Dq Li NO 1040by default. 1041Setting to 1042.Dq Li YES 1043will cause the kernel to ignore TCP frames that have both 1044the SYN and FIN flags set. 1045This prevents OS fingerprinting, but may 1046break some legitimate applications. 1047.It Va icmp_drop_redirect 1048.Pq Vt bool 1049Set to 1050.Dq Li NO 1051by default. 1052Setting to 1053.Dq Li YES 1054will cause the kernel to ignore ICMP REDIRECT packets. 1055Refer to 1056.Xr icmp 4 1057for more information. 1058.It Va icmp_log_redirect 1059.Pq Vt bool 1060Set to 1061.Dq Li NO 1062by default. 1063Setting to 1064.Dq Li YES 1065will cause the kernel to log ICMP REDIRECT packets. 1066Note that 1067the log messages are not rate-limited, so this option should only be used 1068for troubleshooting networks. 1069Refer to 1070.Xr icmp 4 1071for more information. 1072.It Va icmp_bmcastecho 1073.Pq Vt bool 1074Set to 1075.Dq Li YES 1076to respond to broadcast or multicast ICMP ping packets. 1077Refer to 1078.Xr icmp 4 1079for more information. 1080.It Va ip_portrange_first 1081.Pq Vt int 1082If not set to 1083.Dq Li NO , 1084this is the first port in the default portrange. 1085Refer to 1086.Xr ip 4 1087for more information. 1088.It Va ip_portrange_last 1089.Pq Vt int 1090If not set to 1091.Dq Li NO , 1092this is the last port in the default portrange. 1093Refer to 1094.Xr ip 4 1095for more information. 1096.It Va network_interfaces 1097.Pq Vt str 1098Set to the list of network interfaces to configure on this host or 1099.Dq Li AUTO 1100(the default) for all current interfaces. 1101Setting the 1102.Va network_interfaces 1103variable to anything other than the default is deprecated. 1104Interfaces that the administrator wishes to store configuration for, 1105but not start at boot should be configured with the 1106.Dq Li NOAUTO 1107keyword in their 1108.Va ifconfig_ Ns Aq Ar interface 1109variables as described below. 1110.Pp 1111An 1112.Va ifconfig_ Ns Aq Ar interface 1113variable is also assumed to exist for each value of 1114.Ar interface . 1115When an interface name contains any of the characters 1116.Dq Li .-/+ 1117they are translated to 1118.Dq Li _ 1119before lookup. 1120The variable can contain arguments to 1121.Xr ifconfig 8 , 1122as well as special case-insensitive keywords described below. 1123Such keywords are removed before passing the value to 1124.Xr ifconfig 8 1125while the order of the other arguments is preserved. 1126.Pp 1127One can configure more than one IPv4 address with the 1128.Va ipv4_addrs_ Ns Aq Ar interface 1129variable. 1130One or more IP addresses must be provided in Classless Inter-Domain 1131Routing (CIDR) address notation, whose last byte can be a range like 1132192.0.2.5-23/24. 1133In this case the address 192.0.2.5 will be configured with the 1134netmask /24 and the addresses 192.0.2.6 to 192.0.2.23 with 1135the non-conflicting netmask /32 as explained in the 1136.Xr ifconfig 8 1137alias section. 1138With the interface in question being 1139.Li ed0 , 1140an example could look like: 1141.Bd -literal 1142ipv4_addrs_ed0="192.0.2.129/27 192.0.2.1-5/28" 1143.Ed 1144.Pp 1145It is also possible to add IP alias entries using 1146.Xr ifconfig 8 1147syntax with the 1148.Dq Li inet 1149keyword. 1150Assuming that the interface in question was 1151.Li ed0 , 1152it might look 1153something like this: 1154.Bd -literal 1155ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff" 1156ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff" 1157.Ed 1158.Pp 1159And so on. 1160For each 1161.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 1162entry with the 1163.Dq Li inet 1164keyword that is found, 1165its contents are passed to 1166.Xr ifconfig 8 . 1167Execution stops at the first unsuccessful access, so if 1168something like this is present: 1169.Bd -literal 1170ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff" 1171ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff" 1172ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff" 1173ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff" 1174.Ed 1175.Pp 1176Then note that alias4 would 1177.Em not 1178be added since the search would 1179stop with the missing 1180.Dq Li alias3 1181entry. 1182Due to this difficult to manage behavior, the 1183.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 1184form is deprecated. 1185.Pp 1186If the 1187.Pa /etc/start_if. Ns Aq Ar interface 1188file is present, it is read and executed by the 1189.Xr sh 1 1190interpreter 1191before configuring the interface as specified in the 1192.Va ifconfig_ Ns Aq Ar interface 1193and 1194.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 1195variables. 1196.Pp 1197If a 1198.Va vlans_ Ns Aq Ar interface 1199variable is set, 1200a 1201.Xr vlan 4 1202interface will be created for each item in the list with the 1203.Ar vlandev 1204argument set to 1205.Ar interface . 1206If a vlan interface's name is a number, 1207then that number is used as the vlan tag and the new vlan interface is 1208named 1209.Ar interface . Ns Ar tag . 1210Otherwise, 1211the vlan tag must be specified via a 1212.Va vlan 1213parameter in the 1214.Va create_args_ Ns Aq Ar interface 1215variable. 1216.Pp 1217To create a vlan device named 1218.Li em0.101 1219on 1220.Li em0 1221with the vlan tag 101 and the optional the IPv4 address 192.0.2.1/24: 1222.Bd -literal 1223vlans_em0="101" 1224ifconfig_em0_101="inet 192.0.2.1/24" 1225.Ed 1226.Pp 1227To create a vlan device named 1228.Li myvlan 1229on 1230.Li em0 1231with the vlan tag 102: 1232.Bd -literal 1233vlans_em0="myvlan" 1234create_args_myvlan="vlan 102" 1235.Ed 1236.Pp 1237If a 1238.Va wlans_ Ns Aq Ar interface 1239variable is set, 1240an 1241.Xr wlan 4 1242interface will be created for each item in the list with the 1243.Ar wlandev 1244argument set to 1245.Ar interface . 1246Further wlan cloning arguments may be passed to the 1247.Xr ifconfig 8 1248.Cm create 1249command by setting the 1250.Va create_args_ Ns Aq Ar interface 1251variable. 1252One or more 1253.Xr wlan 4 1254devices must be created for each wireless devices as of 1255.Fx 8.0 . 1256Debugging flags for 1257.Xr wlan 4 1258devices as set by 1259.Xr wlandebug 8 1260may be specified with an 1261.Va wlandebug_ Ns Aq Ar interface 1262variable. 1263The contents of this variable will be passed directly to 1264.Xr wlandebug 8 . 1265.Pp 1266If the 1267.Va ifconfig_ Ns Aq Ar interface 1268contains the keyword 1269.Dq Li NOAUTO 1270then the interface will not be configured 1271at boot or by 1272.Pa /etc/pccard_ether 1273when 1274.Va network_interfaces 1275is set to 1276.Dq Li AUTO . 1277.Pp 1278It is possible to bring up an interface with DHCP by adding 1279.Dq Li DHCP 1280to the 1281.Va ifconfig_ Ns Aq Ar interface 1282variable. 1283For instance, to initialize the 1284.Li ed0 1285device via DHCP, 1286it is possible to use something like: 1287.Bd -literal 1288ifconfig_ed0="DHCP" 1289.Ed 1290.Pp 1291Also, if you want to configure your wireless interface with 1292.Xr wpa_supplicant 8 1293for use with WPA, EAP/LEAP or WEP, you need to add 1294.Dq Li WPA 1295to the 1296.Va ifconfig_ Ns Aq Ar interface 1297variable. 1298.Pp 1299Finally, you can add 1300.Xr ifconfig 8 1301options in this variable, in addition to the 1302.Pa /etc/start_if. Ns Aq Ar interface 1303file. 1304For instance, to configure an 1305.Xr ath 4 1306wireless device in station mode with an address obtained 1307via DHCP, using WPA authentication and 802.11b mode, it is 1308possible to use something like: 1309.Bd -literal 1310wlans_ath0="wlan0" 1311ifconfig_wlan0="DHCP WPA mode 11b" 1312.Ed 1313.Pp 1314In addition to the 1315.Va ifconfig_ Ns Aq Ar interface 1316form, a fallback variable 1317.Va ifconfig_DEFAULT 1318may be configured. 1319It will be used for all interfaces with no 1320.Va ifconfig_ Ns Aq Ar interface 1321variable. 1322This is intended to replace the no longer supported 1323.Va pccard_ifconfig 1324variable. 1325.Pp 1326It is also possible to rename an interface by doing: 1327.Bd -literal 1328ifconfig_ed0_name="net0" 1329ifconfig_net0="inet 192.0.2.1 netmask 0xffffff00" 1330.Ed 1331.It Va ipv6_enable 1332.Pq Vt bool 1333This variable is deprecated. 1334Use 1335.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1336and 1337.Va ipv6_activate_all_interfaces 1338if necessary. 1339.Pp 1340If the variable is 1341.Dq Li YES , 1342.Dq Li inet6 accept_rtadv 1343is added to all of 1344.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1345and the 1346.Va ipv6_activate_all_interfaces 1347is defined as 1348.Dq Li YES . 1349.It Va ipv6_prefer 1350.Pq Vt bool 1351This variable is deprecated. 1352Use 1353.Va ip6addrctl_policy 1354instead. 1355.Pp 1356If the variable is 1357.Dq Li YES , 1358the default address selection policy table set by 1359.Xr ip6addrctl 8 1360will be IPv6-preferred. 1361.Pp 1362If the variable is 1363.Dq Li NO , 1364the default address selection policy table set by 1365.Xr ip6addrctl 8 1366will be IPv4-preferred. 1367.It Va ipv6_activate_all_interfaces 1368.Pq Vt bool 1369This controls initial configuration on IPv6-capable 1370interfaces with no corresponding 1371.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1372variable. 1373Note that it is not always necessary to set this variable to 1374.Dq YES 1375to use IPv6 functionality on 1376.Fx . 1377In most cases, just configuring 1378.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1379variables works. 1380.Pp 1381If the variable is 1382.Dq Li NO , 1383all interfaces which do not have a corresponding 1384.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1385variable will be marked as 1386.Dq Li IFDISABLED 1387at creation. 1388This means that all of IPv6 functionality on that interface 1389is completely disabled to enforce a security policy. 1390If the variable is set to 1391.Dq YES , 1392the flag will be cleared on all of the interfaces. 1393.Pp 1394In most cases, just defining an 1395.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1396for an IPv6-capable interface should be sufficient. 1397However, if an interface is added dynamically 1398.Pq by some tunneling protocols such as PPP, for example , 1399it is often difficult to define the variable in advance. 1400In such a case, configuring the 1401.Dq Li IFDISABLED 1402flag can be disabled by setting this variable to 1403.Dq YES . 1404.Pp 1405For more details of the 1406.Dq Li IFDISABLED 1407flag and keywords 1408.Dq Li inet6 ifdisabled , 1409see 1410.Xr ifconfig 8 . 1411.Pp 1412Default is 1413.Dq Li NO . 1414.It Va ipv6_privacy 1415.Pq Vt bool 1416If the variable is 1417.Dq Li YES 1418privacy addresses will be generated for each IPv6 1419interface as described in RFC 4941. 1420.It Va ipv6_network_interfaces 1421.Pq Vt str 1422This is the IPv6 equivalent of 1423.Va network_interfaces . 1424Normally manual configuration of this variable is not needed. 1425.Pp 1426.It Va ipv6_cpe_wanif 1427.Pq Vt str 1428If the variable is set to an interface name, 1429the 1430.Xr ifconfig 8 1431options 1432.Dq inet6 -no_radr accept_rtadv 1433will be added to the specified interface automatically before evaluating 1434.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 , 1435and two 1436.Xr sysctl 8 1437variables 1438.Va net.inet6.ip6.rfc6204w3 1439and 1440.Va net.inet6.ip6.no_radr 1441will be set to 1. 1442.Pp 1443This means the specified interface will accept ICMPv6 Router 1444Advertisement messages on that link and add the discovered 1445routers into the Default Router List. 1446While the other interfaces can still accept RA messages if the 1447.Dq inet6 accept_rtadv 1448option is specified, adding 1449routes into the Default Router List will be disabled by 1450.Dq inet6 no_radr 1451option by default. 1452See 1453.Xr ifconfig 8 1454for more details. 1455.Pp 1456Note that ICMPv6 Router Advertisement messages will be 1457accepted even when 1458.Va net.inet6.ip6.forwarding 1459is 1 1460.Pq packet forwarding is enabled 1461when 1462.Va net.inet6.ip6.rfc6204w3 1463is set to 1. 1464.Pp 1465Default is 1466.Dq Li NO . 1467.It Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1468.Pq Vt str 1469IPv6 functionality on an interface should be configured by 1470.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 , 1471instead of setting ifconfig parameters in 1472.Va ifconfig_ Ns Aq Ar interface . 1473If this variable is empty, all of IPv6 configurations on the 1474specified interface by other variables such as 1475.Va ipv6_prefix_ Ns Ao Ar interface Ac 1476will be ignored. 1477.Pp 1478Aliases should be set by 1479.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 1480with 1481.Dq Li inet6 1482keyword. 1483For example: 1484.Bd -literal 1485ifconfig_ed0_ipv6="inet6 2001:db8:1::1 prefixlen 64" 1486ifconfig_ed0_alias0="inet6 2001:db8:2::1 prefixlen 64" 1487.Ed 1488.Pp 1489Interfaces that have an 1490.Dq Li inet6 accept_rtadv 1491keyword in 1492.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1493setting will be automatically configured by SLAAC 1494.Pq StateLess Address AutoConfiguration 1495described in 1496.Rs 1497.%T "RFC 4862" 1498.Re 1499.Pp 1500Note that a link-local address will be automatically configured in 1501addition to the configured global-scope addresses because the IPv6 1502specifications require it on each link. 1503The address is calculated from the MAC address by using an algorithm 1504defined in 1505.Rs 1506.%T "RFC 4862" 1507.%O "Section 5.3" 1508.Re 1509.Pp 1510If only a link-local address is needed on the interface, 1511the following configuration can be used: 1512.Bd -literal 1513ifconfig_ed0_ipv6="inet6 auto_linklocal" 1514.Ed 1515.Pp 1516A link-local address can also be configured manually. 1517This is useful for the default router address of an IPv6 router 1518so that it does not change when the network interface 1519card is replaced. 1520For example: 1521.Bd -literal 1522ifconfig_ed0_ipv6="inet6 fe80::1 prefixlen 64" 1523.Ed 1524.It Va ipv6_prefix_ Ns Aq Ar interface 1525.Pq Vt str 1526If one or more prefixes are defined in 1527.Va ipv6_prefix_ Ns Aq Ar interface 1528addresses based on each prefix and the EUI-64 interface index will be 1529configured on that interface. 1530Note that this variable will be ignored when 1531.Va ifconfig_ Ns Ao Ar interface Ac Ns _ipv6 1532is empty. 1533.Pp 1534For example, the following configuration 1535.Bd -literal 1536ipv6_prefix_ed0="2001:db8:1:0 2001:db8:2:0" 1537.Ed 1538.Pp 1539is equivalent to the following: 1540.Bd -literal 1541ifconfig_ed0_alias0="inet6 2001:db8:1:: eui64 prefixlen 64" 1542ifconfig_ed0_alias1="inet6 2001:db8:1:: prefixlen 64 anycast" 1543ifconfig_ed0_alias2="inet6 2001:db8:2:: eui64 prefixlen 64" 1544ifconfig_ed0_alias3="inet6 2001:db8:2:: prefixlen 64 anycast" 1545.Ed 1546.Pp 1547These Subnet-Router anycast addresses will be added only when 1548.Va ipv6_gateway_enable 1549is YES. 1550.It Va ipv6_default_interface 1551.Pq Vt str 1552If not set to 1553.Dq Li NO , 1554this is the default output interface for scoped addresses. 1555This works only with ipv6_gateway_enable="NO". 1556.It Va ip6addrctl_enable 1557.Pq Vt bool 1558This variable is to enable configuring default address selection policy table 1559.Pq RFC 3484 . 1560The table can be specified in another variable 1561.Va ip6addrctl_policy . 1562For 1563.Va ip6addrctl_policy 1564the following keywords can be specified: 1565.Dq Li ipv4_prefer , 1566.Dq Li ipv6_prefer , 1567or 1568.Dq Li AUTO . 1569.Pp 1570If 1571.Dq Li ipv4_prefer 1572or 1573.Dq Li ipv6_prefer 1574is specified, 1575.Xr ip6addrctl 8 1576installs a pre-defined policy table described in Section 2.1 1577.Pq IPv6-preferred 1578or 10.3 1579.Pq IPv4-preferred 1580of RFC 3484. 1581.Pp 1582If 1583.Dq Li AUTO 1584is specified, it attempts to read a file 1585.Pa /etc/ip6addrctl.conf 1586first. 1587If this file is found, 1588.Xr ip6addrctl 8 1589reads and installs it. 1590If not found, a policy is automatically set 1591according to 1592.Va ipv6_activate_all_interfaces 1593variable; if the variable is set to 1594.Dq Li YES 1595the IPv6-preferred one is used. 1596Otherwise IPv4-preferred. 1597.Pp 1598The default value of 1599.Va ip6addrctl_enable 1600and 1601.Va ip6addrctl_policy 1602are 1603.Dq Li YES 1604and 1605.Dq Li AUTO , 1606respectively. 1607.It Va cloned_interfaces 1608.Pq Vt str 1609Set to the list of clonable network interfaces to create on this host. 1610Further cloning arguments may be passed to the 1611.Xr ifconfig 8 1612.Cm create 1613command for each interface by setting the 1614.Va create_args_ Ns Aq Ar interface 1615variable. 1616Entries in 1617.Va cloned_interfaces 1618are automatically appended to 1619.Va network_interfaces 1620for configuration. 1621.It Va fec_interfaces 1622.Pq Vt str 1623Set to the list of 1624.Xr ng_fec 4 1625Fast EtherChannel interfaces to configure on this host. 1626A 1627.Va fecconfig_ Ns Aq Ar interface 1628variable is assumed to exist for each value of 1629.Ar interface . 1630The value of this variable is used to configure link aggregated interfaces 1631according to the syntax of the 1632.Cm NGM_FEC_ADD_IFACE 1633to 1634.Xr ngctl 8 1635msg. 1636Additionally, this option ensures that each listed interface is created 1637via the 1638.Cm mkpeer 1639command to 1640.Xr ngctl 8 1641before attempting to configure it. 1642For example: 1643.Bd -literal 1644fec_interfaces="fec0" 1645fecconfig_fec0="em0 em1" 1646ifconfig_fec0="DHCP" 1647.Ed 1648.It Va gif_interfaces 1649.Pq Vt str 1650Set to the list of 1651.Xr gif 4 1652tunnel interfaces to configure on this host. 1653A 1654.Va gifconfig_ Ns Aq Ar interface 1655variable is assumed to exist for each value of 1656.Ar interface . 1657The value of this variable is used to configure the link layer of the 1658tunnel according to the syntax of the 1659.Cm tunnel 1660option to 1661.Xr ifconfig 8 . 1662Additionally, this option ensures that each listed interface is created 1663via the 1664.Cm create 1665option to 1666.Xr ifconfig 8 1667before attempting to configure it. 1668.It Va sppp_interfaces 1669.Pq Vt str 1670Set to the list of 1671.Xr sppp 4 1672interfaces to configure on this host. 1673A 1674.Va spppconfig_ Ns Aq Ar interface 1675variable is assumed to exist for each value of 1676.Ar interface . 1677Each interface should also be configured by a general 1678.Va ifconfig_ Ns Aq Ar interface 1679setting. 1680Refer to 1681.Xr spppcontrol 8 1682for more information about available options. 1683.It Va ppp_enable 1684.Pq Vt bool 1685If set to 1686.Dq Li YES , 1687run the 1688.Xr ppp 8 1689daemon. 1690.It Va ppp_profile 1691.Pq Vt str 1692The name of the profile to use from 1693.Pa /etc/ppp/ppp.conf . 1694Also used for per-profile overrides of 1695.Va ppp_mode 1696and 1697.Va ppp_nat , 1698and 1699.Va ppp_ Ns Ao Ar profile Ac Ns _unit . 1700When the profile name contains any of the characters 1701.Dq Li .-/+ 1702they are translated to 1703.Dq Li _ 1704for the proposes of the override variable names. 1705.It Va ppp_mode 1706.Pq Vt str 1707Mode in which to run the 1708.Xr ppp 8 1709daemon. 1710.It Va ppp_ Ns Ao Ar profile Ac Ns _mode 1711.Pq Vt str 1712Overrides the global 1713.Va ppp_mode 1714for 1715.Ar profile . 1716Accepted modes are 1717.Dq Li auto , 1718.Dq Li ddial , 1719.Dq Li direct 1720and 1721.Dq Li dedicated . 1722See the manual for a full description. 1723.It Va ppp_nat 1724.Pq Vt bool 1725If set to 1726.Dq Li YES , 1727enables network address translation. 1728Used in conjunction with 1729.Va gateway_enable 1730allows hosts on private network addresses access to the Internet using 1731this host as a network address translating router. 1732.It Va ppp_ Ns Ao Ar profile Ac Ns _nat 1733.Pq Vt str 1734Overrides the global 1735.Va ppp_nat 1736for 1737.Ar profile . 1738.It Va ppp_ Ns Ao Ar profile Ac Ns _unit 1739.Pq Vt int 1740Set the unit number to be used for this profile. 1741See the manual description of 1742.Fl unit Ns Ar N 1743for details. 1744.It Va ppp_user 1745.Pq Vt str 1746The name of the user under which 1747.Xr ppp 8 1748should be started. 1749By 1750default, 1751.Xr ppp 8 1752is started as 1753.Dq Li root . 1754.It Va rc_conf_files 1755.Pq Vt str 1756This option is used to specify a list of files that will override 1757the settings in 1758.Pa /etc/defaults/rc.conf . 1759The files will be read in the order in which they are specified and should 1760include the full path to the file. 1761By default, the files specified are 1762.Pa /etc/rc.conf 1763and 1764.Pa /etc/rc.conf.local 1765.It Va zfs_enable 1766.Pq Vt bool 1767If set to 1768.Dq Li YES , 1769.Pa /etc/rc.d/zfs 1770will attempt to automatically mount ZFS file systems and initialize ZFS volumes 1771(ZVOLs). 1772.It Va gptboot_enable 1773.Pq Vt bool 1774If set to 1775.Dq Li YES , 1776.Pa /etc/rc.d/gptboot 1777will log if the system successfully (or not) booted from a GPT partition, 1778which had the 1779.Ar bootonce 1780attribute set using 1781.Xr gpart 8 1782utility. 1783.It Va gbde_autoattach_all 1784.Pq Vt bool 1785If set to 1786.Dq Li YES , 1787.Pa /etc/rc.d/gbde 1788will attempt to automatically initialize your .bde devices in 1789.Pa /etc/fstab . 1790.It Va gbde_devices 1791.Pq Vt str 1792List the devices that the script should try to attach, 1793or 1794.Dq Li AUTO . 1795.It Va gbde_lockdir 1796.Pq Vt str 1797The directory where the 1798.Xr gbde 4 1799lockfiles are located. 1800The default lockfile directory is 1801.Pa /etc . 1802.Pp 1803The lockfile for each individual 1804.Xr gbde 4 1805device can be overridden by setting the variable 1806.Va gbde_lock_ Ns Aq Ar device , 1807where 1808.Ar device 1809is the encrypted device without the 1810.Dq Pa /dev/ 1811and 1812.Dq Pa .bde 1813parts. 1814.It Va gbde_attach_attempts 1815.Pq Vt int 1816Number of times to attempt attaching to a 1817.Xr gbde 4 1818device, i.e., how many times the user is asked for the pass-phrase. 1819Default is 3. 1820.It Va geli_devices 1821.Pq Vt str 1822List of devices to automatically attach on boot. 1823Note that .eli devices from 1824.Pa /etc/fstab 1825are automatically appended to this list. 1826.It Va geli_tries 1827.Pq Vt int 1828Number of times user is asked for the pass-phrase. 1829If empty, it will be taken from 1830.Va kern.geom.eli.tries 1831sysctl variable. 1832.It Va geli_default_flags 1833.Pq Vt str 1834Default flags to use by 1835.Xr geli 8 1836when configuring disk encryption. 1837Flags can be configured for every device separately by defining 1838.Va geli_ Ns Ao Ar device Ac Ns Va _flags 1839variable. 1840.It Va geli_autodetach 1841.Pq Vt str 1842Specifies if GELI devices should be marked for detach on last close after 1843file systems are mounted. 1844Default is 1845.Dq Li YES . 1846This can be changed for every device separately by defining 1847.Va geli_ Ns Ao Ar device Ac Ns Va _autodetach 1848variable. 1849.It Va geli_swap_flags 1850Options passed to the 1851.Xr geli 8 1852utility when encrypted GEOM providers for swap partitions are created. 1853The default is 1854.Dq Li "-e aes -l 256 -s 4096 -d" . 1855.It Va root_rw_mount 1856.Pq Vt bool 1857Set to 1858.Dq Li YES 1859by default. 1860After the file systems are checked at boot time, the root file system 1861is remounted as read-write if this is set to 1862.Dq Li YES . 1863Diskless systems that mount their root file system from a read-only remote 1864NFS share should set this to 1865.Dq Li NO 1866in their 1867.Pa rc.conf . 1868.It Va fsck_y_enable 1869.Pq Vt bool 1870If set to 1871.Dq Li YES , 1872.Xr fsck 8 1873will be run with the 1874.Fl y 1875flag if the initial preen 1876of the file systems fails. 1877.It Va background_fsck 1878.Pq Vt bool 1879If set to 1880.Dq Li YES , 1881the system will attempt to run 1882.Xr fsck 8 1883in the background where possible. 1884.It Va background_fsck_delay 1885.Pq Vt int 1886The amount of time in seconds to sleep before starting a background 1887.Xr fsck 8 . 1888It defaults to sixty seconds to allow large applications such as 1889the X server to start before disk I/O bandwidth is monopolized by 1890.Xr fsck 8 . 1891If set to a negative number, the background file system check will be 1892delayed indefinitely to allow the administrator to run it at a more 1893convenient time. 1894For example it may be run from 1895.Xr cron 8 1896by adding a line like 1897.Pp 1898.Dl "0 4 * * * root /etc/rc.d/bgfsck forcestart" 1899.Pp 1900to 1901.Pa /etc/crontab . 1902.It Va netfs_types 1903.Pq Vt str 1904List of file system types that are network-based. 1905This list should generally not be modified by end users. 1906Use 1907.Va extra_netfs_types 1908instead. 1909.It Va extra_netfs_types 1910.Pq Vt str 1911If set to something other than 1912.Dq Li NO 1913(the default), 1914this variable extends the list of file system types 1915for which automatic mounting at startup by 1916.Xr rc 8 1917should be delayed until the network is initialized. 1918It should contain 1919a whitespace-separated list of network file system descriptor pairs, 1920each consisting of a file system type as passed to 1921.Xr mount 8 1922and a human-readable, one-word description, 1923joined with a colon 1924.Pq Ql \&: . 1925Extending the default list in this way is only necessary 1926when third party file system types are used. 1927.It Va syslogd_enable 1928.Pq Vt bool 1929If set to 1930.Dq Li YES , 1931run the 1932.Xr syslogd 8 1933daemon. 1934.It Va syslogd_program 1935.Pq Vt str 1936Path to 1937.Xr syslogd 8 1938(default 1939.Pa /usr/sbin/syslogd ) . 1940.It Va syslogd_flags 1941.Pq Vt str 1942If 1943.Va syslogd_enable 1944is set to 1945.Dq Li YES , 1946these are the flags to pass to 1947.Xr syslogd 8 . 1948.It Va inetd_enable 1949.Pq Vt bool 1950If set to 1951.Dq Li YES , 1952run the 1953.Xr inetd 8 1954daemon. 1955.It Va inetd_program 1956.Pq Vt str 1957Path to 1958.Xr inetd 8 1959(default 1960.Pa /usr/sbin/inetd ) . 1961.It Va inetd_flags 1962.Pq Vt str 1963If 1964.Va inetd_enable 1965is set to 1966.Dq Li YES , 1967these are the flags to pass to 1968.Xr inetd 8 . 1969.It Va hastd_enable 1970.Pq Vt bool 1971If set to 1972.Dq Li YES , 1973run the 1974.Xr hastd 8 1975daemon. 1976.It Va hastd_program 1977.Pq Vt str 1978Path to 1979.Xr hastd 8 1980(default 1981.Pa /sbin/hastd ) . 1982.It Va hastd_flags 1983.Pq Vt str 1984If 1985.Va hastd_enable 1986is set to 1987.Dq Li YES , 1988these are the flags to pass to 1989.Xr hastd 8 . 1990.It Va named_enable 1991.Pq Vt bool 1992If set to 1993.Dq Li YES , 1994run the 1995.Xr named 8 1996daemon. 1997.It Va named_program 1998.Pq Vt str 1999Path to 2000.Xr named 8 2001(default 2002.Pa /usr/sbin/named ) . 2003.It Va named_conf 2004.Pq Vt str 2005Path to 2006.Xr named 8 2007configuration file, (default 2008.Pa /etc/namedb/named.conf ) . 2009.It Va named_flags 2010.Pq Vt str 2011If 2012.Va named_enable 2013is set to 2014.Dq Li YES , 2015these are the flags to pass to 2016.Xr named 8 . 2017.It Va named_uid 2018.Pq Vt str 2019The user that the 2020.Xr named 8 2021process should be run as. 2022.It Va named_chrootdir 2023.Pq Vt str 2024The root directory for a name server run in a 2025.Xr chroot 8 2026environment (default 2027.Pa /var/named ) . 2028If left empty 2029.Xr named 8 2030will not be run in a 2031.Xr chroot 8 2032environment. 2033.It Va named_chroot_autoupdate 2034.Pq Vt bool 2035Set to 2036.Dq Li NO 2037to disable automatic update of the 2038.Xr chroot 8 2039environment. 2040.It Va named_symlink_enable 2041.Pq Vt bool 2042Set to 2043.Dq Li NO 2044to disable symlinking of 2045daemon's PID file 2046into the 2047.Xr chroot 8 2048environment. 2049.It Va named_wait 2050.Pq Vt bool 2051Set to have 2052.Pa /etc/rc.d/named 2053loop until working name service is established. 2054.It Va named_wait_host 2055.Pq Vt str 2056Name of host to lookup for the named_wait option. 2057(Default localhost) 2058.It Va named_auto_forward 2059.Pq Vt bool 2060Set to enable automatic creation of a forwarder 2061configuration file derived from 2062.Pa /etc/resolv.conf . 2063.It Va named_auto_forward_only 2064.Pq Vt bool 2065Set to change the default forwarder configuration from 2066.Dq forward first 2067to 2068.Dq forward only . 2069.It Va kerberos5_server_enable 2070.Pq Vt bool 2071Set to 2072.Dq Li YES 2073to start a Kerberos 5 authentication server 2074at boot time. 2075.It Va kerberos5_server 2076.Pq Vt str 2077If 2078.Va kerberos5_server_enable 2079is set to 2080.Dq Li YES 2081this is the path to Kerberos 5 Authentication Server. 2082.It Va kerberos5_server_flags 2083.Pq Vt str 2084Empty by default. 2085This variable contains additional flags to be passed to the Kerberos 5 2086authentication server. 2087.It Va kadmind5_server_enable 2088.Pq Vt bool 2089Set to 2090.Dq Li YES 2091to start 2092.Xr kadmind 8 , 2093the Kerberos 5 Administration Daemon; set to 2094.Dq Li NO 2095on a slave server. 2096.It Va kadmind5_server 2097.Pq Vt str 2098If 2099.Va kadmind5_server_enable 2100is set to 2101.Dq Li YES 2102this is the path to Kerberos 5 Administration Daemon. 2103.It Va kpasswdd_server_enable 2104.Pq Vt bool 2105Set to 2106.Dq Li YES 2107to start 2108.Xr kpasswdd 8 , 2109the Kerberos 5 Password-Changing Daemon; set to 2110.Dq Li NO 2111on a slave server. 2112.It Va kpasswdd_server 2113.Pq Vt str 2114If 2115.Va kpasswdd_server_enable 2116is set to 2117.Dq Li YES 2118this is the path to Kerberos 5 Password-Changing Daemon. 2119.It Va kfd_enable 2120.Pq Vt bool 2121Set to 2122.Dq Li YES 2123to start 2124.Xr kfd 8 , 2125the Kerberos 5 ticket forwarding daemon, at the boot time. 2126.It Va kfd_program 2127.Pq Vt str 2128Path to 2129.Xr kfd 8 2130(default 2131.Pa /usr/libexec/kfd ) . 2132.It Va rwhod_enable 2133.Pq Vt bool 2134If set to 2135.Dq Li YES , 2136run the 2137.Xr rwhod 8 2138daemon at boot time. 2139.It Va rwhod_flags 2140.Pq Vt str 2141If 2142.Va rwhod_enable 2143is set to 2144.Dq Li YES , 2145these are the flags to pass to it. 2146.It Va amd_enable 2147.Pq Vt bool 2148If set to 2149.Dq Li YES , 2150run the 2151.Xr amd 8 2152daemon at boot time. 2153.It Va amd_flags 2154.Pq Vt str 2155If 2156.Va amd_enable 2157is set to 2158.Dq Li YES , 2159these are the flags to pass to it. 2160See the 2161.Xr amd 8 2162manpage for more information. 2163.It Va amd_map_program 2164.Pq Vt str 2165If set, 2166the specified program is run to get the list of 2167.Xr amd 8 2168maps. 2169For example, if the 2170.Xr amd 8 2171maps are stored in NIS, one can set this to 2172run 2173.Xr ypcat 1 2174to get a list of 2175.Xr amd 8 2176maps from the 2177.Pa amd.master 2178NIS map. 2179.It Va update_motd 2180.Pq Vt bool 2181If set to 2182.Dq Li YES , 2183.Pa /etc/motd 2184will be updated at boot time to reflect the kernel release 2185being run. 2186If set to 2187.Dq Li NO , 2188.Pa /etc/motd 2189will not be updated. 2190.It Va nfs_client_enable 2191.Pq Vt bool 2192If set to 2193.Dq Li YES , 2194run the NFS client daemons at boot time. 2195.It Va nfs_access_cache 2196.Pq Vt int 2197If 2198.Va nfs_client_enable 2199is set to 2200.Dq Li YES , 2201this can be set to 2202.Dq Li 0 2203to disable NFS ACCESS RPC caching, or to the number of seconds for which 2204NFS ACCESS 2205results should be cached. 2206A value of 2-10 seconds will substantially reduce network 2207traffic for many NFS operations. 2208.It Va nfs_server_enable 2209.Pq Vt bool 2210If set to 2211.Dq Li YES , 2212run the NFS server daemons at boot time. 2213.It Va nfs_server_flags 2214.Pq Vt str 2215If 2216.Va nfs_server_enable 2217is set to 2218.Dq Li YES , 2219these are the flags to pass to the 2220.Xr nfsd 8 2221daemon. 2222.It Va nfsv4_server_enable 2223.Pq Vt bool 2224If 2225.Va nfs_server_enable 2226is set to 2227.Dq Li YES 2228and 2229.Va nfsv4_server_enable 2230are set to 2231.Dq Li YES , 2232enable the server for NFSv4 as well as NFSv2 and NFSv3. 2233.It Va nfsuserd_enable 2234.Pq Vt bool 2235If 2236.Va nfsuserd_enable 2237is set to 2238.Dq Li YES , 2239run the nfsuserd daemon, which is needed for NFSv4 in order 2240to map between user/group names vs uid/gid numbers. 2241If 2242.Va nfsv4_server_enable 2243is set to 2244.Dq Li YES , 2245this will be forced enabled. 2246.It Va nfsuserd_flags 2247.Pq Vt str 2248If 2249.Va nfsuserd_enable 2250is set to 2251.Dq Li YES , 2252these are the flags to pass to the 2253.Xr nfsuserd 8 2254daemon. 2255.It Va nfscbd_enable 2256.Pq Vt bool 2257If 2258.Va nfscbd_enable 2259is set to 2260.Dq Li YES , 2261run the nfscbd daemon, which enables callbacks/delegations for the NFSv4 client. 2262.It Va nfscbd_flags 2263.Pq Vt str 2264If 2265.Va nfscbd_enable 2266is set to 2267.Dq Li YES , 2268these are the flags to pass to the 2269.Xr nfscbd 8 2270daemon. 2271.It Va oldnfs_server_enable 2272.Pq Vt bool 2273If 2274.Va oldnfs_server_enable 2275is set to 2276.Dq Li YES , 2277force the NFS server daemons to run the old NFS server code 2278that does not support NFSv4. 2279.It Va mountd_enable 2280.Pq Vt bool 2281If set to 2282.Dq Li YES , 2283and no 2284.Va nfs_server_enable 2285is set, start 2286.Xr mountd 8 , 2287but not 2288.Xr nfsd 8 2289daemon. 2290It is commonly needed to run CFS without real NFS used. 2291.It Va mountd_flags 2292.Pq Vt str 2293If 2294.Va mountd_enable 2295is set to 2296.Dq Li YES , 2297these are the flags to pass to the 2298.Xr mountd 8 2299daemon. 2300.It Va weak_mountd_authentication 2301.Pq Vt bool 2302If set to 2303.Dq Li YES , 2304allow services like PCNFSD to make non-privileged mount 2305requests. 2306.It Va nfs_reserved_port_only 2307.Pq Vt bool 2308If set to 2309.Dq Li YES , 2310provide NFS services only on a secure port. 2311.It Va nfs_bufpackets 2312.Pq Vt int 2313If set to a number, indicates the number of packets worth of 2314socket buffer space to reserve on an NFS client. 2315The kernel default is typically 4. 2316Using a higher number may be 2317useful on gigabit networks to improve performance. 2318The minimum value is 23192 and the maximum is 64. 2320.It Va rpc_lockd_enable 2321.Pq Vt bool 2322If set to 2323.Dq Li YES 2324and also an NFS server or client, run 2325.Xr rpc.lockd 8 2326at boot time. 2327.It Va rpc_lockd_flags 2328.Pq Vt str 2329If 2330.Va rpc_lockd_enable 2331is set to 2332.Dq Li YES , 2333these are the flags to pass to the 2334.Xr rpc.lockd 8 2335daemon. 2336.It Va rpc_statd_enable 2337.Pq Vt bool 2338If set to 2339.Dq Li YES 2340and also an NFS server or client, run 2341.Xr rpc.statd 8 2342at boot time. 2343.It Va rpc_statd_flags 2344.Pq Vt str 2345If 2346.Va rpc_statd_enable 2347is set to 2348.Dq Li YES , 2349these are the flags to pass to the 2350.Xr rpc.statd 8 2351daemon. 2352.It Va rpcbind_program 2353.Pq Vt str 2354Path to 2355.Xr rpcbind 8 2356(default 2357.Pa /usr/sbin/rpcbind ) . 2358.It Va rpcbind_enable 2359.Pq Vt bool 2360If set to 2361.Dq Li YES , 2362run the 2363.Xr rpcbind 8 2364service at boot time. 2365.It Va rpcbind_flags 2366.Pq Vt str 2367If 2368.Va rpcbind_enable 2369is set to 2370.Dq Li YES , 2371these are the flags to pass to the 2372.Xr rpcbind 8 2373daemon. 2374.It Va keyserv_enable 2375.Pq Vt bool 2376If set to 2377.Dq Li YES , 2378run the 2379.Xr keyserv 8 2380daemon on boot for running Secure RPC. 2381.It Va keyserv_flags 2382.Pq Vt str 2383If 2384.Va keyserv_enable 2385is set to 2386.Dq Li YES , 2387these are the flags to pass to 2388.Xr keyserv 8 2389daemon. 2390.It Va pppoed_enable 2391.Pq Vt bool 2392If set to 2393.Dq Li YES , 2394run the 2395.Xr pppoed 8 2396daemon at boot time to provide PPP over Ethernet services. 2397.It Va pppoed_ Ns Aq Ar provider 2398.Pq Vt str 2399.Xr pppoed 8 2400listens to requests to this 2401.Ar provider 2402and ultimately runs 2403.Xr ppp 8 2404with a 2405.Ar system 2406argument of the same name. 2407.It Va pppoed_flags 2408.Pq Vt str 2409Additional flags to pass to 2410.Xr pppoed 8 . 2411.It Va pppoed_interface 2412.Pq Vt str 2413The network interface to run 2414.Xr pppoed 8 2415on. 2416This is mandatory when 2417.Va pppoed_enable 2418is set to 2419.Dq Li YES . 2420.It Va timed_enable 2421.Pq Vt bool 2422If set to 2423.Dq Li YES , 2424run the 2425.Xr timed 8 2426service at boot time. 2427This command is intended for networks of 2428machines where a consistent 2429.Dq "network time" 2430for all hosts must be established. 2431This is often useful in large NFS 2432environments where time stamps on files are expected to be consistent 2433network-wide. 2434.It Va timed_flags 2435.Pq Vt str 2436If 2437.Va timed_enable 2438is set to 2439.Dq Li YES , 2440these are the flags to pass to the 2441.Xr timed 8 2442service. 2443.It Va ntpdate_enable 2444.Pq Vt bool 2445If set to 2446.Dq Li YES , 2447run 2448.Xr ntpdate 8 2449at system startup. 2450This command is intended to 2451synchronize the system clock only 2452.Em once 2453from some standard reference. 2454.It Va ntpdate_config 2455.Pq Vt str 2456Configuration file for 2457.Xr ntpdate 8 . 2458Default 2459.Pa /etc/ntp.conf . 2460.It Va ntpdate_hosts 2461.Pq Vt str 2462A whitespace-separated list of NTP servers to synchronize with at startup. 2463The default is to use the servers listed in 2464.Va ntpdate_config , 2465if that file exists. 2466.It Va ntpdate_program 2467.Pq Vt str 2468Path to 2469.Xr ntpdate 8 2470(default 2471.Pa /usr/sbin/ntpdate ) . 2472.It Va ntpdate_flags 2473.Pq Vt str 2474If 2475.Va ntpdate_enable 2476is set to 2477.Dq Li YES , 2478these are the flags to pass to the 2479.Xr ntpdate 8 2480command (typically a hostname). 2481.It Va ntpd_enable 2482.Pq Vt bool 2483If set to 2484.Dq Li YES , 2485run the 2486.Xr ntpd 8 2487command at boot time. 2488.It Va ntpd_program 2489.Pq Vt str 2490Path to 2491.Xr ntpd 8 2492(default 2493.Pa /usr/sbin/ntpd ) . 2494.It Va ntpd_config 2495.Pq Vt str 2496Path to 2497.Xr ntpd 8 2498configuration file. 2499Default 2500.Pa /etc/ntp.conf . 2501.It Va ntpd_flags 2502.Pq Vt str 2503If 2504.Va ntpd_enable 2505is set to 2506.Dq Li YES , 2507these are the flags to pass to the 2508.Xr ntpd 8 2509daemon. 2510.It Va ntpd_sync_on_start 2511.Pq Vt bool 2512If set to 2513.Dq Li YES , 2514.Xr ntpd 8 2515is run with the 2516.Fl g 2517flag, which syncs the system's clock on startup. 2518See 2519.Xr ntpd 8 2520for more information regarding the 2521.Fl g 2522option. 2523This is a preferred alternative to using 2524.Xr ntpdate 8 2525or specifying the 2526.Va ntpdate_enable 2527variable. 2528.It Va nis_client_enable 2529.Pq Vt bool 2530If set to 2531.Dq Li YES , 2532run the 2533.Xr ypbind 8 2534service at system boot time. 2535.It Va nis_client_flags 2536.Pq Vt str 2537If 2538.Va nis_client_enable 2539is set to 2540.Dq Li YES , 2541these are the flags to pass to the 2542.Xr ypbind 8 2543service. 2544.It Va nis_ypset_enable 2545.Pq Vt bool 2546If set to 2547.Dq Li YES , 2548run the 2549.Xr ypset 8 2550daemon at system boot time. 2551.It Va nis_ypset_flags 2552.Pq Vt str 2553If 2554.Va nis_ypset_enable 2555is set to 2556.Dq Li YES , 2557these are the flags to pass to the 2558.Xr ypset 8 2559daemon. 2560.It Va nis_server_enable 2561.Pq Vt bool 2562If set to 2563.Dq Li YES , 2564run the 2565.Xr ypserv 8 2566daemon at system boot time. 2567.It Va nis_server_flags 2568.Pq Vt str 2569If 2570.Va nis_server_enable 2571is set to 2572.Dq Li YES , 2573these are the flags to pass to the 2574.Xr ypserv 8 2575daemon. 2576.It Va nis_ypxfrd_enable 2577.Pq Vt bool 2578If set to 2579.Dq Li YES , 2580run the 2581.Xr rpc.ypxfrd 8 2582daemon at system boot time. 2583.It Va nis_ypxfrd_flags 2584.Pq Vt str 2585If 2586.Va nis_ypxfrd_enable 2587is set to 2588.Dq Li YES , 2589these are the flags to pass to the 2590.Xr rpc.ypxfrd 8 2591daemon. 2592.It Va nis_yppasswdd_enable 2593.Pq Vt bool 2594If set to 2595.Dq Li YES , 2596run the 2597.Xr rpc.yppasswdd 8 2598daemon at system boot time. 2599.It Va nis_yppasswdd_flags 2600.Pq Vt str 2601If 2602.Va nis_yppasswdd_enable 2603is set to 2604.Dq Li YES , 2605these are the flags to pass to the 2606.Xr rpc.yppasswdd 8 2607daemon. 2608.It Va rpc_ypupdated_enable 2609.Pq Vt bool 2610If set to 2611.Dq Li YES , 2612run the 2613.Nm rpc.ypupdated 2614daemon at system boot time. 2615.It Va bsnmpd_enable 2616.Pq Vt bool 2617If set to 2618.Dq Li YES , 2619run the 2620.Xr bsnmpd 1 2621daemon at system boot time. 2622Be sure to understand the security implications of running SNMP daemon 2623on your host. 2624.It Va bsnmpd_flags 2625.Pq Vt str 2626If 2627.Va bsnmpd_enable 2628is set to 2629.Dq Li YES , 2630these are the flags to pass to the 2631.Xr bsnmpd 1 2632daemon. 2633.It Va defaultrouter 2634.Pq Vt str 2635If not set to 2636.Dq Li NO , 2637create a default route to this host name or IP address 2638(use an IP address if this router is also required to get to the 2639name server!). 2640.It Va ipv6_defaultrouter 2641.Pq Vt str 2642The IPv6 equivalent of 2643.Va defaultrouter . 2644.It Va static_arp_pairs 2645.Pq Vt str 2646Set to the list of static ARP pairs that are to be added at system 2647boot time. 2648For each whitespace separated 2649.Ar element 2650in the value, a 2651.Va static_arp_ Ns Aq Ar element 2652variable is assumed to exist whose contents will later be passed to a 2653.Dq Nm arp Cm -S 2654operation. 2655For example 2656.Bd -literal 2657static_arp_pairs="gw" 2658static_arp_gw="192.168.1.1 00:01:02:03:04:05" 2659.Ed 2660.It Va static_ndp_pairs 2661.Pq Vt str 2662Set to the list of static NDP pairs that are to be added at system 2663boot time. 2664For each whitespace separated 2665.Ar element 2666in the value, a 2667.Va static_ndp_ Ns Aq Ar element 2668variable is assumed to exist whose contents will later be passed to a 2669.Dq Nm ndp Cm -s 2670operation. 2671For example 2672.Bd -literal 2673static_ndp_pairs="gw" 2674static_ndp_gw="2001:db8:3::1 00:01:02:03:04:05" 2675.Ed 2676.It Va static_routes 2677.Pq Vt str 2678Set to the list of static routes that are to be added at system 2679boot time. 2680If not set to 2681.Dq Li NO 2682then for each whitespace separated 2683.Ar element 2684in the value, a 2685.Va route_ Ns Aq Ar element 2686variable is assumed to exist 2687whose contents will later be passed to a 2688.Dq Nm route Cm add 2689operation. 2690For example: 2691.Bd -literal 2692static_routes="ext mcast:gif0 gif0local:gif0" 2693route_ext="-net 10.0.0.0/24 -gateway 192.168.0.1" 2694route_mcast="-net 224.0.0.0/4 -iface gif0" 2695route_gif0local="-host 169.254.1.1 -iface lo0" 2696.Ed 2697.Pp 2698When an 2699.Ar element 2700is in the form of 2701.Li name:ifname , 2702the route is specific to the interface 2703.Li ifname . 2704.It Va ipv6_static_routes 2705.Pq Vt str 2706The IPv6 equivalent of 2707.Va static_routes . 2708If not set to 2709.Dq Li NO 2710then for each whitespace separated 2711.Ar element 2712in the value, a 2713.Va ipv6_route_ Ns Aq Ar element 2714variable is assumed to exist 2715whose contents will later be passed to a 2716.Dq Nm route Cm add Fl inet6 2717operation. 2718.It Va natm_static_routes 2719.Pq Vt str 2720The 2721.Xr natmip 4 2722equivalent of 2723.Va static_routes . 2724If not empty then for each whitespace separated 2725.Ar element 2726in the value, a 2727.Va route_ Ns Aq Ar element 2728variable is assumed to exist whose contents will later be passed to a 2729.Dq Nm atmconfig Cm natm Cm add 2730operation. 2731.It Va gateway_enable 2732.Pq Vt bool 2733If set to 2734.Dq Li YES , 2735configure host to act as an IP router, e.g.\& to forward packets 2736between interfaces. 2737.It Va ipv6_gateway_enable 2738.Pq Vt bool 2739The IPv6 equivalent of 2740.Va gateway_enable . 2741.It Va routed_enable 2742.Pq Vt bool 2743If set to 2744.Dq Li YES , 2745run a routing daemon of some sort, based on the 2746settings of 2747.Va routed_program 2748and 2749.Va routed_flags . 2750.It Va route6d_enable 2751.Pq Vt bool 2752The IPv6 equivalent of 2753.Va routed_enable . 2754If set to 2755.Dq Li YES , 2756run a routing daemon of some sort, based on the 2757settings of 2758.Va route6d_program 2759and 2760.Va route6d_flags . 2761.It Va routed_program 2762.Pq Vt str 2763If 2764.Va routed_enable 2765is set to 2766.Dq Li YES , 2767this is the name of the routing daemon to use. 2768.It Va route6d_program 2769.Pq Vt str 2770The IPv6 equivalent of 2771.Va routed_program . 2772.It Va routed_flags 2773.Pq Vt str 2774If 2775.Va routed_enable 2776is set to 2777.Dq Li YES , 2778these are the flags to pass to the routing daemon. 2779.It Va route6d_flags 2780.Pq Vt str 2781The IPv6 equivalent of 2782.Va routed_flags . 2783.It Va mrouted_enable 2784.Pq Vt bool 2785If set to 2786.Dq Li YES , 2787run the multicast routing daemon, 2788.Xr mrouted 8 . 2789.It Va mroute6d_enable 2790.Pq Vt bool 2791The IPv6 equivalent of 2792.Va mrouted_enable . 2793If set to 2794.Dq Li YES , 2795run the IPv6 multicast routing daemon. 2796.Pp 2797Note that multicast routing daemons are no longer included in the 2798.Fx 2799base system, however, both 2800.Xr mrouted 8 2801and 2802.Xr pim6dd 8 2803may be installed from the 2804.Fx 2805Ports Collection. 2806.It Va mrouted_flags 2807.Pq Vt str 2808If 2809.Va mrouted_enable 2810is set to 2811.Dq Li YES , 2812these are the flags to pass to the 2813.Xr mrouted 8 2814daemon. 2815.It Va mroute6d_flags 2816.Pq Vt str 2817The IPv6 equivalent of 2818.Va mrouted_flags . 2819If 2820.Va mroute6d_enable 2821is set to 2822.Dq Li YES , 2823these are the flags passed to the IPv6 multicast routing daemon. 2824.It Va mroute6d_program 2825.Pq Vt str 2826If 2827.Va mroute6d_enable 2828is set to 2829.Dq Li YES , 2830this is the path to the IPv6 multicast routing daemon. 2831.It Va rtadvd_enable 2832.Pq Vt bool 2833If set to 2834.Dq Li YES , 2835run the 2836.Xr rtadvd 8 2837daemon at boot time. 2838The 2839.Xr rtadvd 8 2840utility sends ICMPv6 Router Advertisement messages to 2841the interfaces specified in 2842.Va rtadvd_interfaces . 2843This should only be enabled with great care. 2844You may want to fine-tune 2845.Xr rtadvd.conf 5 . 2846.It Va rtadvd_interfaces 2847.Pq Vt str 2848If 2849.Va rtadvd_enable 2850is set to 2851.Dq Li YES 2852this is the list of interfaces to use. 2853.It Va ipxgateway_enable 2854.Pq Vt bool 2855If set to 2856.Dq Li YES , 2857enable the routing of IPX traffic. 2858.It Va ipxrouted_enable 2859.Pq Vt bool 2860If set to 2861.Dq Li YES , 2862run the 2863.Xr IPXrouted 8 2864daemon at system boot time. 2865.It Va ipxrouted_flags 2866.Pq Vt str 2867If 2868.Va ipxrouted_enable 2869is set to 2870.Dq Li YES , 2871these are the flags to pass to the 2872.Xr IPXrouted 8 2873daemon. 2874.It Va arpproxy_all 2875.Pq Vt bool 2876If set to 2877.Dq Li YES , 2878enable global proxy ARP. 2879.It Va forward_sourceroute 2880.Pq Vt bool 2881If set to 2882.Dq Li YES 2883and 2884.Va gateway_enable 2885is also set to 2886.Dq Li YES , 2887source-routed packets are forwarded. 2888.It Va accept_sourceroute 2889.Pq Vt bool 2890If set to 2891.Dq Li YES , 2892the system will accept source-routed packets directed at it. 2893.It Va rarpd_enable 2894.Pq Vt bool 2895If set to 2896.Dq Li YES , 2897run the 2898.Xr rarpd 8 2899daemon at system boot time. 2900.It Va rarpd_flags 2901.Pq Vt str 2902If 2903.Va rarpd_enable 2904is set to 2905.Dq Li YES , 2906these are the flags to pass to the 2907.Xr rarpd 8 2908daemon. 2909.It Va bootparamd_enable 2910.Pq Vt bool 2911If set to 2912.Dq Li YES , 2913run the 2914.Xr bootparamd 8 2915daemon at system boot time. 2916.It Va bootparamd_flags 2917.Pq Vt str 2918If 2919.Va bootparamd_enable 2920is set to 2921.Dq Li YES , 2922these are the flags to pass to the 2923.Xr bootparamd 8 2924daemon. 2925.It Va stf_interface_ipv4addr 2926.Pq Vt str 2927If not set to 2928.Dq Li NO , 2929this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling 2930interface). 2931Specify this entry to enable the 6to4 interface. 2932.It Va stf_interface_ipv4plen 2933.Pq Vt int 2934Prefix length for 6to4 IPv4 addresses, to limit peer address range. 2935An effective value is 0-31. 2936.It Va stf_interface_ipv6_ifid 2937.Pq Vt str 2938IPv6 interface ID for 2939.Xr stf 4 . 2940This can be set to 2941.Dq Li AUTO . 2942.It Va stf_interface_ipv6_slaid 2943.Pq Vt str 2944IPv6 Site Level Aggregator for 2945.Xr stf 4 . 2946.It Va ipv6_faith_prefix 2947.Pq Vt str 2948If not set to 2949.Dq Li NO , 2950this is the faith prefix to enable a FAITH IPv6-to-IPv4 TCP 2951translator. 2952You also need 2953.Xr faithd 8 2954setup. 2955.It Va ipv6_ipv4mapping 2956.Pq Vt bool 2957If set to 2958.Dq Li YES 2959this enables IPv4 mapped IPv6 address communication (like 2960.Li ::ffff:a.b.c.d ) . 2961.It Va rtsold_enable 2962.Pq Vt bool 2963Set to 2964.Dq Li YES 2965to enable the 2966.Xr rtsold 8 2967daemon to send ICMPv6 Router Solicitation messages. 2968.It Va rtsold_flags 2969.Pq Vt str 2970If 2971.Va rtsold_enable 2972is set to 2973.Dq Li YES , 2974these are the flags to pass to 2975.Xr rtsold 8 . 2976.It Va rtsol_flags 2977.Pq Vt str 2978For interfaces configured with the 2979.Dq Li inet6 accept_rtadv 2980keyword, these are the flags to pass to 2981.Xr rtsol 8 . 2982.Pp 2983Note that 2984.Va rtsold_enable 2985is mutually exclusive to 2986.Va rtsol_flags ; 2987.Va rtsold_enable 2988takes precedence. 2989.It Va atm_enable 2990.Pq Vt bool 2991Set to 2992.Dq Li YES 2993to enable the configuration of ATM interfaces at system boot time. 2994For all of the ATM variables described below, please refer to the 2995.Xr atm 8 2996manual page for further details on the available command parameters. 2997Also refer to the files in 2998.Pa /usr/share/examples/atm 2999for more detailed configuration information. 3000.It Va atm_load 3001.Pq Vt str 3002This is a list of physical ATM interface drivers to load. 3003Typical values are 3004.Dq Li hfa_pci 3005and/or 3006.Dq Li hea_pci . 3007.It Va atm_netif_ Ns Aq Ar intf 3008.Pq Vt str 3009For the ATM physical interface 3010.Ar intf , 3011this variable defines the name prefix and count for the ATM network 3012interfaces to be created. 3013The value will be passed as the parameters of an 3014.Dq Nm atm Cm "set netif" Ar intf 3015command. 3016.It Va atm_sigmgr_ Ns Aq Ar intf 3017.Pq Vt str 3018For the ATM physical interface 3019.Ar intf , 3020this variable defines the ATM signalling manager to be used. 3021The value will be passed as the parameters of an 3022.Dq Nm atm Cm attach Ar intf 3023command. 3024.It Va atm_prefix_ Ns Aq Ar intf 3025.Pq Vt str 3026For the ATM physical interface 3027.Ar intf , 3028this variable defines the NSAP prefix for interfaces using a UNI signalling 3029manager. 3030If set to 3031.Dq Li ILMI , 3032the prefix will automatically be set via the 3033.Xr ilmid 8 3034daemon. 3035Otherwise, the value will be passed as the parameters of an 3036.Dq Nm atm Cm "set prefix" Ar intf 3037command. 3038.It Va atm_macaddr_ Ns Aq Ar intf 3039.Pq Vt str 3040For the ATM physical interface 3041.Ar intf , 3042this variable defines the MAC address for interfaces using a UNI signalling 3043manager. 3044If set to 3045.Dq Li NO , 3046the hardware MAC address contained in the ATM interface card will be used. 3047Otherwise, the value will be passed as the parameters of an 3048.Dq Nm atm Cm "set mac" Ar intf 3049command. 3050.It Va atm_arpserver_ Ns Aq Ar netif 3051.Pq Vt str 3052For the ATM network interface 3053.Ar netif , 3054this variable defines the ATM address for a host which is to provide ATMARP 3055service. 3056This variable is only applicable to interfaces using a UNI signalling 3057manager. 3058If set to 3059.Dq Li local , 3060this host will become an ATMARP server. 3061The value will be passed as the parameters of an 3062.Dq Nm atm Cm "set arpserver" Ar netif 3063command. 3064.It Va atm_scsparp_ Ns Aq Ar netif 3065.Pq Vt bool 3066If set to 3067.Dq Li YES , 3068SCSP/ATMARP service for the network interface 3069.Ar netif 3070will be initiated using the 3071.Xr scspd 8 3072and 3073.Xr atmarpd 8 3074daemons. 3075This variable is only applicable if 3076.Va atm_arpserver_ Ns Aq Ar netif 3077is set to 3078.Dq Li local . 3079.It Va atm_pvcs 3080.Pq Vt str 3081Set to the list of ATM PVCs to be added at system 3082boot time. 3083For each whitespace separated 3084.Ar element 3085in the value, an 3086.Va atm_pvc_ Ns Aq Ar element 3087variable is assumed to exist. 3088The value of each of these variables 3089will be passed as the parameters of an 3090.Dq Nm atm Cm "add pvc" 3091command. 3092.It Va atm_arps 3093.Pq Vt str 3094Set to the list of permanent ATM ARP entries to be added 3095at system boot time. 3096For each whitespace separated 3097.Ar element 3098in the value, an 3099.Va atm_arp_ Ns Aq Ar element 3100variable is assumed to exist. 3101The value of each of these variables 3102will be passed as the parameters of an 3103.Dq Nm atm Cm "add arp" 3104command. 3105.It Va natm_interfaces 3106.Pq Vt str 3107Set to the list of 3108.Xr natm 4 3109interfaces that will also be used for HARP through 3110.Xr harp 4 . 3111If this list is not empty all interfaces in the list will be brought up 3112with 3113.Xr ifconfig 8 3114and 3115.Xr harp 4 3116will be loaded. 3117For this to work the interface drivers must be either compiled into the 3118kernel or must reside on the root partition. 3119.It Va keybell 3120.Pq Vt str 3121The keyboard bell sound. 3122Set to 3123.Dq Li normal , 3124.Dq Li visual , 3125.Dq Li off , 3126or 3127.Dq Li NO 3128if the default behavior is desired. 3129For details, refer to the 3130.Xr kbdcontrol 1 3131manpage. 3132.It Va keyboard 3133.Pq Vt str 3134If set to a non-null string, the virtual console's keyboard input is 3135set to this device. 3136.It Va keymap 3137.Pq Vt str 3138If set to 3139.Dq Li NO , 3140no keymap is installed, otherwise the value is used to install 3141the keymap file in 3142.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd . 3143.It Va keyrate 3144.Pq Vt str 3145The keyboard repeat speed. 3146Set to 3147.Dq Li slow , 3148.Dq Li normal , 3149.Dq Li fast , 3150or 3151.Dq Li NO 3152if the default behavior is desired. 3153.It Va keychange 3154.Pq Vt str 3155If not set to 3156.Dq Li NO , 3157attempt to program the function keys with the value. 3158The value should 3159be a single string of the form: 3160.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... . 3161.It Va cursor 3162.Pq Vt str 3163Can be set to the value of 3164.Dq Li normal , 3165.Dq Li blink , 3166.Dq Li destructive , 3167or 3168.Dq Li NO 3169to set the cursor behavior explicitly or choose the default behavior. 3170.It Va scrnmap 3171.Pq Vt str 3172If set to 3173.Dq Li NO , 3174no screen map is installed, otherwise the value is used to install 3175the screen map file in 3176.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value . 3177.It Va font8x16 3178.Pq Vt str 3179If set to 3180.Dq Li NO , 3181the default 8x16 font value is used for screen size requests, otherwise 3182the value in 3183.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 3184is used. 3185.It Va font8x14 3186.Pq Vt str 3187If set to 3188.Dq Li NO , 3189the default 8x14 font value is used for screen size requests, otherwise 3190the value in 3191.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 3192is used. 3193.It Va font8x8 3194.Pq Vt str 3195If set to 3196.Dq Li NO , 3197the default 8x8 font value is used for screen size requests, otherwise 3198the value in 3199.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 3200is used. 3201.It Va blanktime 3202.Pq Vt int 3203If set to 3204.Dq Li NO , 3205the default screen blanking interval is used, otherwise it is set 3206to 3207.Ar value 3208seconds. 3209.It Va saver 3210.Pq Vt str 3211If not set to 3212.Dq Li NO , 3213this is the actual screen saver to use 3214.Li ( blank , snake , daemon , 3215etc). 3216.It Va moused_nondefault_enable 3217.Pq Vt str 3218If set to 3219.Dq Li NO , 3220the mouse device specified on 3221the command line is not automatically treated as enabled by the 3222.Pa /etc/rc.d/moused 3223script. 3224Having this variable set to 3225.Dq Li YES 3226allows a 3227.Xr usb 4 3228mouse, 3229for example, 3230to be enabled as soon as it is plugged in. 3231.It Va moused_enable 3232.Pq Vt str 3233If set to 3234.Dq Li YES , 3235the 3236.Xr moused 8 3237daemon is started for doing cut/paste selection on the console. 3238.It Va moused_type 3239.Pq Vt str 3240This is the protocol type of the mouse connected to this host. 3241This variable must be set if 3242.Va moused_enable 3243is set to 3244.Dq Li YES . 3245The 3246.Xr moused 8 3247daemon 3248is able to detect the appropriate mouse type automatically in many cases. 3249Set this variable to 3250.Dq Li auto 3251to let the daemon detect it, or 3252select one from the following list if the automatic detection fails. 3253.Pp 3254If the mouse is attached to the PS/2 mouse port, choose 3255.Dq Li auto 3256or 3257.Dq Li ps/2 , 3258regardless of the brand and model of the mouse. 3259Likewise, if the 3260mouse is attached to the bus mouse port, choose 3261.Dq Li auto 3262or 3263.Dq Li busmouse . 3264All other protocols are for serial mice and will not work with 3265the PS/2 and bus mice. 3266If this is a USB mouse, 3267.Dq Li auto 3268is the only protocol type which will work. 3269.Pp 3270.Bl -tag -width ".Li x10mouseremote" -compact 3271.It Li microsoft 3272Microsoft mouse (serial) 3273.It Li intellimouse 3274Microsoft IntelliMouse (serial) 3275.It Li mousesystems 3276Mouse systems Corp.\& mouse (serial) 3277.It Li mmseries 3278MM Series mouse (serial) 3279.It Li logitech 3280Logitech mouse (serial) 3281.It Li busmouse 3282A bus mouse 3283.It Li mouseman 3284Logitech MouseMan and TrackMan (serial) 3285.It Li glidepoint 3286ALPS GlidePoint (serial) 3287.It Li thinkingmouse 3288Kensington ThinkingMouse (serial) 3289.It Li ps/2 3290PS/2 mouse 3291.It Li mmhittab 3292MM HitTablet (serial) 3293.It Li x10mouseremote 3294X10 MouseRemote (serial) 3295.It Li versapad 3296Interlink VersaPad (serial) 3297.El 3298.Pp 3299Even if the mouse is not in the above list, it may be compatible 3300with one in the list. 3301Refer to the manual page for 3302.Xr moused 8 3303for compatibility information. 3304.Pp 3305It should also be noted that while this is enabled, any 3306other client of the mouse (such as an X server) should access 3307the mouse through the virtual mouse device, 3308.Pa /dev/sysmouse , 3309and configure it as a 3310.Dq Li sysmouse 3311type mouse, since all 3312mouse data is converted to this single canonical format when 3313using 3314.Xr moused 8 . 3315If the client program does not support the 3316.Dq Li sysmouse 3317type, 3318specify the 3319.Dq Li mousesystems 3320type. 3321It is the second preferred type. 3322.It Va moused_port 3323.Pq Vt str 3324If 3325.Va moused_enable 3326is set to 3327.Dq Li YES , 3328this is the actual port the mouse is on. 3329It might be 3330.Pa /dev/cuau0 3331for a COM1 serial mouse, 3332.Pa /dev/psm0 3333for a PS/2 mouse or 3334.Pa /dev/mse0 3335for a bus mouse, for example. 3336.It Va moused_flags 3337.Pq Vt str 3338If 3339.Va moused_flags 3340is set, its value is used as an additional set of flags to pass to the 3341.Xr moused 8 3342daemon. 3343.It Va "moused_" Ns Ar XXX Ns Va "_flags" 3344When 3345.Va moused_nondefault_enable 3346is enabled, and a 3347.Xr moused 8 3348daemon is started for a non-default port, the 3349.Va "moused_" Ns Ar XXX Ns Va "_flags" 3350set of options has precedence over and replaces the default 3351.Va moused_flags 3352(where 3353.Ar XXX 3354is the name of the non-default port, i.e.,\& 3355.Ar ums0 ) . 3356By setting 3357.Va "moused_" Ns Ar XXX Ns Va "_flags" 3358it is possible to set up a different set of default flags for each 3359.Xr moused 8 3360instance. 3361For example, you can use 3362.Dq Li "-3" 3363for the default 3364.Va moused_flags 3365to make your laptop's touchpad more comfortable to use, 3366but an empty set of options for 3367.Va moused_ums0_flags 3368when your 3369.Xr usb 4 3370mouse has three or more buttons. 3371.It Va mousechar_start 3372.Pq Vt int 3373If set to 3374.Dq Li NO , 3375the default mouse cursor character range 3376.Li 0xd0 Ns - Ns Li 0xd3 3377is used, 3378otherwise the range start is set 3379to 3380.Ar value 3381character, see 3382.Xr vidcontrol 1 . 3383Use if the default range is occupied in the language code table. 3384.It Va allscreens_flags 3385.Pq Vt str 3386If set, 3387.Xr vidcontrol 1 3388is run with these options for each of the virtual terminals 3389.Pq Pa /dev/ttyv* . 3390For example, 3391.Dq Fl m Cm on 3392will enable the mouse pointer on all virtual terminals 3393if 3394.Va moused_enable 3395is set to 3396.Dq Li YES . 3397.It Va allscreens_kbdflags 3398.Pq Vt str 3399If set, 3400.Xr kbdcontrol 1 3401is run with these options for each of the virtual terminals 3402.Pq Pa /dev/ttyv* . 3403For example, 3404.Dq Fl h Li 200 3405will set the 3406.Xr syscons 4 3407scrollback (history) buffer to 200 lines. 3408.It Va cron_enable 3409.Pq Vt bool 3410If set to 3411.Dq Li YES , 3412run the 3413.Xr cron 8 3414daemon at system boot time. 3415.It Va cron_program 3416.Pq Vt str 3417Path to 3418.Xr cron 8 3419(default 3420.Pa /usr/sbin/cron ) . 3421.It Va cron_flags 3422.Pq Vt str 3423If 3424.Va cron_enable 3425is set to 3426.Dq Li YES , 3427these are the flags to pass to 3428.Xr cron 8 . 3429.It Va cron_dst 3430.Pq Vt bool 3431If set to 3432.Dq Li YES , 3433enable the special handling of transitions to and from the 3434Daylight Saving Time in 3435.Xr cron 8 3436(equivalent to using the flag 3437.Fl s ) . 3438.It Va lpd_program 3439.Pq Vt str 3440Path to 3441.Xr lpd 8 3442(default 3443.Pa /usr/sbin/lpd ) . 3444.It Va lpd_enable 3445.Pq Vt bool 3446If set to 3447.Dq Li YES , 3448run the 3449.Xr lpd 8 3450daemon at system boot time. 3451.It Va lpd_flags 3452.Pq Vt str 3453If 3454.Va lpd_enable 3455is set to 3456.Dq Li YES , 3457these are the flags to pass to the 3458.Xr lpd 8 3459daemon. 3460.It Va chkprintcap_enable 3461.Pq Vt bool 3462If set to 3463.Dq Li YES , 3464run the 3465.Xr chkprintcap 8 3466command before starting the 3467.Xr lpd 8 3468daemon. 3469.It Va chkprintcap_flags 3470.Pq Vt str 3471If 3472.Va lpd_enable 3473and 3474.Va chkprintcap_enable 3475are set to 3476.Dq Li YES , 3477these are the flags to pass to the 3478.Xr chkprintcap 8 3479program. 3480The default is 3481.Dq Li -d , 3482which causes missing directories to be created. 3483.It Va mta_start_script 3484.Pq Vt str 3485This variable specifies the full path to the script to run to start 3486a mail transfer agent. 3487The default is 3488.Pa /etc/rc.sendmail . 3489The 3490.Va sendmail_* 3491variables which 3492.Pa /etc/rc.sendmail 3493uses are documented in the 3494.Xr rc.sendmail 8 3495manual page. 3496.It Va dumpdev 3497.Pq Vt str 3498Indicates the device (usually a swap partition) to which a crash dump 3499should be written in the event of a system crash. 3500If the value of this variable is 3501.Dq Li AUTO , 3502the first suitable swap device listed in 3503.Pa /etc/fstab 3504will be used as dump device. 3505Otherwise, the value of this variable is passed as the argument to 3506.Xr dumpon 8 . 3507To disable crash dumps, set this variable to 3508.Dq Li NO . 3509.It Va dumpdir 3510.Pq Vt str 3511When the system reboots after a crash and a crash dump is found on the 3512device specified by the 3513.Va dumpdev 3514variable, 3515.Xr savecore 8 3516will save that crash dump and a copy of the kernel to the directory 3517specified by the 3518.Va dumpdir 3519variable. 3520The default value is 3521.Pa /var/crash . 3522Set to 3523.Dq Li NO 3524to not run 3525.Xr savecore 8 3526at boot time when 3527.Va dumpdir 3528is set. 3529.It Va savecore_flags 3530.Pq Vt str 3531If crash dumps are enabled, these are the flags to pass to the 3532.Xr savecore 8 3533utility. 3534.It Va quota_enable 3535.Pq Vt bool 3536Set to 3537.Dq Li YES 3538to turn on user and group disk quotas on system startup via the 3539.Xr quotaon 8 3540command for all file systems marked as having quotas enabled in 3541.Pa /etc/fstab . 3542The kernel must be built with 3543.Cd "options QUOTA" 3544for disk quotas to function. 3545.It Va check_quotas 3546.Pq Vt bool 3547Set to 3548.Dq Li YES 3549to enable user and group disk quota checking via the 3550.Xr quotacheck 8 3551command. 3552.It Va quotacheck_flags 3553.Pq Vt str 3554If 3555.Va quota_enable 3556is set to 3557.Dq Li YES , 3558and 3559.Va check_quotas 3560is set to 3561.Dq Li YES , 3562these are the flags to pass to the 3563.Xr quotacheck 8 3564utility. 3565The default is 3566.Dq Li "-a" , 3567which checks quotas for all file systems with quotas enabled in 3568.Pa /etc/fstab . 3569.It Va quotaon_flags 3570.Pq Vt str 3571If 3572.Va quota_enable 3573is set to 3574.Dq Li YES , 3575these are the flags to pass to the 3576.Xr quotaon 8 3577utility. 3578The default is 3579.Dq Li "-a" , 3580which enables quotas for all file systems with quotas enabled in 3581.Pa /etc/fstab . 3582.It Va quotaoff_flags 3583.Pq Vt str 3584If 3585.Va quota_enable 3586is set to 3587.Dq Li YES , 3588these are the flags to pass to the 3589.Xr quotaoff 8 3590utility when shutting down the quota system. 3591The default is 3592.Dq Li "-a" , 3593which disables quotas for all file systems with quotas enabled in 3594.Pa /etc/fstab . 3595.It Va accounting_enable 3596.Pq Vt bool 3597Set to 3598.Dq Li YES 3599to enable system accounting through the 3600.Xr accton 8 3601facility. 3602.It Va ibcs2_enable 3603.Pq Vt bool 3604Set to 3605.Dq Li YES 3606to enable iBCS2 (SCO) binary emulation at system initial boot 3607time. 3608.It Va ibcs2_loaders 3609.Pq Vt str 3610If not set to 3611.Dq Li NO 3612and if 3613.Va ibcs2_enable 3614is set to 3615.Dq Li YES , 3616this specifies a list of additional iBCS2 loaders to enable. 3617.It Va linux_enable 3618.Pq Vt bool 3619Set to 3620.Dq Li YES 3621to enable Linux/ELF binary emulation at system initial 3622boot time. 3623.It Va svr4_enable 3624.Pq Vt bool 3625If set to 3626.Dq Li YES , 3627enable SysVR4 emulation at boot time. 3628.It Va sysvipc_enable 3629.Pq Vt bool 3630If set to 3631.Dq Li YES , 3632load System V IPC primitives at boot time. 3633.It Va clear_tmp_enable 3634.Pq Vt bool 3635Set to 3636.Dq Li YES 3637to have 3638.Pa /tmp 3639cleaned at startup. 3640.It Va clear_tmp_X 3641.Pq Vt bool 3642Set to 3643.Dq Li NO 3644to disable removing of X11 lock files, 3645and the removal and (secure) recreation 3646of the various socket directories for X11 3647related programs. 3648.It Va ldconfig_paths 3649.Pq Vt str 3650Set to the list of shared library paths to use with 3651.Xr ldconfig 8 . 3652NOTE: 3653.Pa /usr/lib 3654will always be added first, so it need not appear in this list. 3655.It Va ldconfig32_paths 3656.Pq Vt str 3657Set to the list of 32-bit compatibility shared library paths to 3658use with 3659.Xr ldconfig 8 . 3660.It Va ldconfig_paths_aout 3661.Pq Vt str 3662Set to the list of shared library paths to use with 3663.Xr ldconfig 8 3664legacy 3665.Xr a.out 5 3666support. 3667.It Va ldconfig_insecure 3668.Pq Vt bool 3669The 3670.Xr ldconfig 8 3671utility normally refuses to use directories 3672which are writable by anyone except root. 3673Set this variable to 3674.Dq Li YES 3675to disable that security check during system startup. 3676.It Va ldconfig_local_dirs 3677.Pq Vt str 3678Set to the list of local 3679.Xr ldconfig 8 3680directories. 3681The names of all files in the directories listed will be 3682passed as arguments to 3683.Xr ldconfig 8 . 3684.It Va ldconfig_local32_dirs 3685.Pq Vt str 3686Set to the list of local 32-bit compatibility 3687.Xr ldconfig 8 3688directories. 3689The names of all files in the directories listed will be 3690passed as arguments to 3691.Dq Nm ldconfig Fl 32 . 3692.It Va kern_securelevel_enable 3693.Pq Vt bool 3694Set to 3695.Dq Li YES 3696to set the kernel security level at system startup. 3697.It Va kern_securelevel 3698.Pq Vt int 3699The kernel security level to set at startup. 3700The allowed range of 3701.Ar value 3702ranges from \-1 (the compile time default) to 3 (the 3703most secure). 3704See 3705.Xr security 7 3706for the list of possible security levels and their effect 3707on system operation. 3708.It Va sshd_program 3709.Pq Vt str 3710Path to the SSH server program 3711.Pa ( /usr/sbin/sshd 3712is the default). 3713.It Va sshd_enable 3714.Pq Vt bool 3715Set to 3716.Dq Li YES 3717to start 3718.Xr sshd 8 3719at system boot time. 3720.It Va sshd_flags 3721.Pq Vt str 3722If 3723.Va sshd_enable 3724is set to 3725.Dq Li YES , 3726these are the flags to pass to the 3727.Xr sshd 8 3728daemon. 3729.It Va ftpd_program 3730.Pq Vt str 3731Path to the FTP server program 3732.Pa ( /usr/libexec/ftpd 3733is the default). 3734.It Va ftpd_enable 3735.Pq Vt bool 3736Set to 3737.Dq Li YES 3738to start 3739.Xr ftpd 8 3740as a stand-alone daemon at system boot time. 3741.It Va ftpd_flags 3742.Pq Vt str 3743If 3744.Va ftpd_enable 3745is set to 3746.Dq Li YES , 3747these are the additional flags to pass to the 3748.Xr ftpd 8 3749daemon. 3750.It Va watchdogd_enable 3751.Pq Vt bool 3752If set to 3753.Dq Li YES , 3754start the 3755.Xr watchdogd 8 3756daemon at boot time. 3757This requires that the kernel have been compiled with a 3758.Xr watchdog 4 3759compatible device. 3760.It Va watchdogd_flags 3761.Pq Vt str 3762If 3763.Va watchdogd_enable 3764is set to 3765.Dq Li YES , 3766these are the flags passed to the 3767.Xr watchdogd 8 3768daemon. 3769.It Va devfs_rulesets 3770.Pq Vt str 3771List of files containing sets of rules for 3772.Xr devfs 8 . 3773.It Va devfs_system_ruleset 3774.Pq Vt str 3775Rule name(s) to apply to the system 3776.Pa /dev 3777itself. 3778.It Va devfs_set_rulesets 3779.Pq Vt str 3780Pairs of already-mounted 3781.Pa dev 3782directories and rulesets that should be applied to them. 3783For example: /mount/dev=ruleset_name 3784.It Va devfs_load_rulesets 3785.Pq Vt bool 3786If set, always load the default rulesets listed in 3787.Va devfs_rulesets . 3788.It Va performance_cx_lowest 3789.Pq Vt str 3790CPU idle state to use while on AC power. 3791The string 3792.Dq Li LOW 3793indicates that 3794.Xr acpi 4 3795should use the lowest power state available while 3796.Dq Li HIGH 3797indicates that the lowest latency state (less power savings) should be used. 3798.It Va performance_cpu_freq 3799.Pq Vt str 3800CPU clock frequency to use while on AC power. 3801The string 3802.Dq Li LOW 3803indicates that 3804.Xr cpufreq 4 3805should use the lowest frequency available while 3806.Dq Li HIGH 3807indicates that the highest frequency (less power savings) should be used. 3808.It Va economy_cx_lowest 3809.Pq Vt str 3810CPU idle state to use when off AC power. 3811The string 3812.Dq Li LOW 3813indicates that 3814.Xr acpi 4 3815should use the lowest power state available while 3816.Dq Li HIGH 3817indicates that the lowest latency state (less power savings) should be used. 3818.It Va economy_cpu_freq 3819.Pq Vt str 3820CPU clock frequency to use when off AC power. 3821The string 3822.Dq Li LOW 3823indicates that 3824.Xr cpufreq 4 3825should use the lowest frequency available while 3826.Dq Li HIGH 3827indicates that the highest frequency (less power savings) should be used. 3828.It Va jail_enable 3829.Pq Vt bool 3830If set to 3831.Dq Li NO , 3832any configured jails will not be started. 3833.It Va jail_parallel_start 3834.Pq Vt bool 3835If set to 3836.Dq Li YES , 3837all configured jails will be started in the background (in parallel). 3838.It Va jail_list 3839.Pq Vt str 3840A space separated list of names for jails. 3841This is purely a configuration aid to help identify and 3842configure multiple jails. 3843The names specified in this list will be used to 3844identify settings common to an instance of a jail, 3845and should contain alphanumeric characters only. 3846Assuming that the jail in question was named 3847.Li vjail , 3848you would have the following dependent variables: 3849.Bd -literal 3850jail_vjail_hostname="jail.example.com" 3851jail_vjail_ip="192.0.2.100" 3852jail_vjail_rootdir="/var/jails/vjail/root" 3853.Ed 3854.Pp 3855.It Va jail_flags 3856.Pq Vt str 3857Unset by default. 3858When set, use as default value for 3859.Va jail_ Ns Ao Ar jname Ac Ns Va _flags 3860for every jail in 3861.Va jail_list . 3862.It Va jail_interface 3863.Pq Vt str 3864Unset by default. 3865When set, use as default value for 3866.Va jail_ Ns Ao Ar jname Ac Ns Va _interface 3867for every jail in 3868.Va jail_list . 3869.It Va jail_fstab 3870.Pq Vt str 3871Unset by default. 3872When set, use as default value for 3873.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 3874for every jail in 3875.Va jail_list . 3876.It Va jail_mount_enable 3877.Pq Vt bool 3878Set to 3879.Dq Li NO 3880by default. 3881When set to 3882.Dq Li YES , 3883sets 3884.Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable 3885to 3886.Dq Li YES 3887by default for every jail in 3888.Va jail_list . 3889.It Va jail_devfs_ruleset 3890.Pq Vt str 3891Unset by default. 3892When set, sets 3893.Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_ruleset 3894to given value for every jail in 3895.Va jail_list . 3896.It Va jail_devfs_enable 3897.Pq Vt bool 3898Set to 3899.Dq Li NO 3900by default. 3901When set to 3902.Dq Li YES , 3903sets 3904.Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable 3905to 3906.Dq Li YES 3907by default for every jail in 3908.Va jail_list . 3909.It Va jail_fdescfs_enable 3910.Pq Vt bool 3911Set to 3912.Dq Li NO 3913by default. 3914When set to 3915.Dq Li YES , 3916sets 3917.Va jail_ Ns Ao Ar jname Ac Ns Va _fdescfs_enable 3918to 3919.Dq Li YES 3920by default for every jail in 3921.Va jail_list . 3922.It Va jail_procfs_enable 3923.Pq Vt bool 3924Set to 3925.Dq Li NO 3926by default. 3927When set to 3928.Dq Li YES , 3929sets 3930.Va jail_ Ns Ao Ar jname Ac Ns Va _fdescfs_enable 3931to 3932.Dq Li YES 3933by default for every jail in 3934.Va jail_list . 3935.It Va jail_exec_prestart Ns Aq Ar N 3936.Pq Vt str 3937Unset by default. 3938When set, use as default value for 3939.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_prestart Ns Aq Ar N 3940for every jail in 3941.Va jail_list . 3942.It Va jail_exec_start 3943.Pq Vt str 3944Unset by default. 3945When set, use as default value for 3946.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start 3947for every jail in 3948.Va jail_list . 3949.It Va jail_exec_afterstart Ns Aq Ar N 3950.Pq Vt str 3951Unset by default. 3952When set, use as default value for 3953.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_afterstart Ns Aq Ar N 3954for every jail in 3955.Va jail_list . 3956.It Va jail_exec_poststart Ns Aq Ar N 3957.Pq Vt str 3958Unset by default. 3959When set, use as default value for 3960.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_poststart Ns Aq Ar N 3961for every jail in 3962.Va jail_list . 3963.It Va jail_exec_prestop Ns Aq Ar N 3964.Pq Vt str 3965Unset by default. 3966When set, use as default value for 3967.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_prestop Ns Aq Ar N 3968for every jail in 3969.Va jail_list . 3970.It Va jail_exec_stop 3971Unset by default. 3972When set, use as default value for 3973.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop 3974for every jail in 3975.Va jail_list . 3976.It Va jail_exec_poststop Ns Aq Ar N 3977.Pq Vt str 3978Unset by default. 3979When set, use as default value for 3980.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_poststop Ns Aq Ar N 3981for every jail in 3982.Va jail_list . 3983.It Va jail_ Ns Ao Ar jname Ac Ns Va _rootdir 3984.Pq Vt str 3985Unset by default. 3986Set to the root directory used by jail 3987.Va jname . 3988.It Va jail_ Ns Ao Ar jname Ac Ns Va _hostname 3989.Pq Vt str 3990Unset by default. 3991Set to the fully qualified domain name (FQDN) assigned to jail 3992.Va jname . 3993.It Va jail_ Ns Ao Ar jname Ac Ns Va _parameters 3994.Pq Vt str 3995Unset by default. 3996Set extra parameters for jail 3997.Va jname , 3998such as 3999.Dq Li allow.chflags 4000or 4001.Dq Li children.max . 4002See 4003.Xr jail 8 4004for a list of available parameters. 4005Note that the following parameters are already defined by 4006.Pa rc.d/jail 4007script out of their corresponding 4008.Nm 4009variables: 4010.Bl -tag -width "host.hostname" -offset indent 4011.It Li path 4012set from 4013.Va jail_ Ns Ao Ar jname Ac Ns Va _rootdir 4014.It Li host.hostname 4015set from 4016.Va jail_ Ns Ao Ar jname Ac Ns Va _hostname 4017.It Li command 4018set from 4019.Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start 4020.It Li ip4.addr 4021set if 4022.Va jail_ Ns Ao Ar jname Ac Ns Va _ip 4023contains IPv4 addresses 4024.It Li ip6.addr 4025set if 4026.Va jail_ Ns Ao Ar jname Ac Ns Va _ip6 4027contains IPv6 addresses 4028.El 4029.It Va jail_ Ns Ao Ar jname Ac Ns Va _ip 4030.Pq Vt str 4031Unset by default. 4032Set to the (primary) IPv4 and/or IPv6 address(es) assigned to the jail. 4033The argument can be a sole address or a comma separated list of addresses. 4034Additionally each address can be prefixed by the name of an interface 4035followed by a pipe to overwrite 4036.Va jail_ Ns Ao Ar jname Ac Ns Va _interface 4037or 4038.Va jail_interface 4039and/or suffixed by a netmask, prefixlen or prefix. 4040In case no netmask, prefixlen or prefix is given, 4041.Sq /32 4042will be used for IPv4 and 4043.Sq /128 4044will be used for an IPv6 address. 4045If no address is given for the jail then the jail will be started with 4046no networking support. 4047.It Va jail_ Ns Ao Ar jname Ac Ns Va _ip_multi Ns Aq Ar n 4048.Pq Vt str 4049Unset by default. 4050Set additional IPv4 and/or IPv6 address(es) assigned to the jail. 4051The sequence starts with 4052.Dq Li _multi0 4053and the numbers have to be strictly ascending. 4054These entries follow the same syntax as their primary 4055.Va jail_ Ns Ao Ar jname Ac Ns Va _ip 4056entry. 4057The order of the entries can be important as the first address for 4058each address family found will be the primary address of the jail. 4059See 4060.Va ip-addresses 4061option in 4062.Xr jail 8 4063for more details. 4064.It Va jail_ Ns Ao Ar jname Ac Ns Va _flags 4065.Pq Vt str 4066Set to 4067.Dq Li -l -U root 4068by default. 4069These are flags to pass to 4070.Xr jail 8 . 4071.It Va jail_ Ns Ao Ar jname Ac Ns Va _interface 4072.Pq Vt str 4073Unset by default. 4074When set, sets the interface to use when setting IP address alias. 4075Note that the alias is created at jail startup and removed at jail shutdown. 4076.It Va jail_ Ns Ao Ar jname Ac Ns Va _fib 4077.Pq Vt str 4078Unset by default. 4079When set, the jail is started with the specified forwarding table (sometimes 4080referred to as a routing table) via 4081.Xr setfib 1 . 4082.It Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 4083.Pq Vt str 4084Set to 4085.Pa /etc/fstab. Ns Aq Ar jname 4086by default. 4087This is the file system information file to use for jail 4088.Va jname . 4089.It Va jail_ Ns Ao Ar jname Ac Ns Va _mount_enable 4090.Pq Vt bool 4091Set to 4092.Dq Li NO 4093by default. 4094When set to 4095.Dq Li YES , 4096mount all file systems from 4097.Va jail_ Ns Ao Ar jname Ac Ns Va _fstab 4098at jail startup. 4099.It Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_ruleset 4100.Pq Vt str 4101Unset by default. 4102When set, defines the device file system ruleset file to use for jail 4103.Va jname . 4104.It Va jail_ Ns Ao Ar jname Ac Ns Va _devfs_enable 4105.Pq Vt bool 4106Set to 4107.Dq Li NO 4108by default. 4109When set to 4110.Dq Li YES , 4111mount the device file system inside jail 4112.Ar jname 4113at jail startup. 4114.It Va jail_ Ns Ao Ar jname Ac Ns Va _fdescfs_enable 4115.Pq Vt bool 4116Set to 4117.Dq Li NO 4118by default. 4119When set to 4120.Dq Li YES , 4121mount the file-descriptor file system inside jail 4122.Ar jname 4123at jail startup. 4124.It Va jail_ Ns Ao Ar jname Ac Ns Va _procfs_enable 4125.Pq Vt bool 4126Set to 4127.Dq Li NO 4128by default. 4129When set to 4130.Dq Li YES , 4131mount the process file system inside jail 4132.Ar jname 4133at jail startup. 4134.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_prestart Ns Aq Ar N 4135.Pq Vt str 4136Unset by default. 4137This is the command run as 4138.Ar N Ns 4139th command 4140before jail startup, where 4141.Ar N 4142is 0, 1, and so on. 4143It is run outside the jail. 4144.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_start 4145.Pq Vt str 4146Set to 4147.Dq Li /bin/sh /etc/rc 4148by default. 4149This is the command executed in a jail at jail startup. 4150.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_afterstart Ns Aq Ar N 4151.Pq Vt str 4152Unset by default. 4153This is the command run as 4154.Ar N Ns 4155th command 4156in a jail 4157after jail startup, where 4158.Ar N 4159is 1, 2, and so on. 4160.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_poststart Ns Aq Ar N 4161.Pq Vt str 4162Unset by default. 4163This is the command run as 4164.Ar N Ns 4165th command 4166after jail startup, where 4167.Ar N 4168is 0, 1, and so on. 4169It is run outside the jail. 4170.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_prestop Ns Aq Ar N 4171.Pq Vt str 4172Unset by default. 4173This is the command run as 4174.Ar N Ns 4175th command 4176before jail shutdown, where 4177.Ar N 4178is 0, 1, and so on. 4179It is run outside the jail. 4180.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_stop 4181.Pq Vt str 4182Set to 4183.Dq Li /bin/sh /etc/rc.shutdown 4184by default. 4185This is the command executed in a jail at jail shutdown. 4186.It Va jail_ Ns Ao Ar jname Ac Ns Va _exec_poststop Ns Aq Ar N 4187.Pq Vt str 4188Unset by default. 4189This is the command run as 4190.Ar N Ns 4191th command 4192after jail shutdown, where 4193.Ar N 4194is 0, 1, and so on. 4195It is run outside the jail. 4196.It Va jail_set_hostname_allow 4197.Pq Vt bool 4198If set to 4199.Dq Li NO , 4200do not allow the root user in a jail to set its hostname. 4201.It Va jail_socket_unixiproute_only 4202.Pq Vt bool 4203If set to 4204.Dq Li YES , 4205do not allow any sockets, 4206besides UNIX/IP/route sockets, 4207to be used within a jail. 4208.It Va jail_sysvipc_allow 4209.Pq Vt bool 4210If set to 4211.Dq Li YES , 4212allow applications within a jail to use System V IPC. 4213.\" ----------------------------------------------------- 4214.It Va harvest_interrupt 4215.Pq Vt bool 4216Set to 4217.Dq Li YES 4218to use hardware interrupts as an entropy source. 4219Refer to 4220.Xr random 4 4221for more information. 4222.It Va harvest_ethernet 4223.Pq Vt bool 4224Set to 4225.Dq Li YES 4226to use LAN traffic as an entropy source. 4227Refer to 4228.Xr random 4 4229for more information. 4230.It Va harvest_p_to_p 4231.Pq Vt bool 4232Set to 4233.Dq Li YES 4234to use serial line traffic as an entropy source. 4235Refer to 4236.Xr random 4 4237for more information. 4238.It Va entropy_dir 4239.Pq Vt str 4240Set to 4241.Dq Li NO 4242to disable caching entropy via 4243.Xr cron 8 . 4244Otherwise set to the directory used to store entropy files in. 4245.It Va entropy_file 4246.Pq Vt str 4247Set to 4248.Dq Li NO 4249to disable caching entropy through reboots. 4250Otherwise set to the filename used to store cached entropy through 4251reboots. 4252This file should be located on the root file system to seed the 4253.Xr random 4 4254device as early as possible in the boot process. 4255.It Va entropy_save_sz 4256.Pq Vt int 4257Size of the entropy cache files saved by 4258.Nm save-entropy 4259periodically. 4260.It Va entropy_save_num 4261.Pq Vt int 4262Number of entropy cache files to save by 4263.Nm save-entropy 4264periodically. 4265.It Va ipsec_enable 4266.Pq Vt bool 4267Set to 4268.Dq Li YES 4269to run 4270.Xr setkey 8 4271on 4272.Va ipsec_file 4273at boot time. 4274.It Va ipsec_file 4275.Pq Vt str 4276Configuration file for 4277.Xr setkey 8 . 4278.It Va dmesg_enable 4279.Pq Vt bool 4280Set to 4281.Dq Li YES 4282to save 4283.Xr dmesg 8 4284to 4285.Pa /var/run/dmesg.boot 4286on boot. 4287.It Va rcshutdown_timeout 4288.Pq Vt int 4289If set, start a watchdog timer in the background which will terminate 4290.Pa rc.shutdown 4291if 4292.Xr shutdown 8 4293has not completed within the specified time (in seconds). 4294Notice that in addition to this soft timeout, 4295.Xr init 8 4296also applies a hard timeout for the execution of 4297.Pa rc.shutdown . 4298This is configured via 4299.Xr sysctl 8 4300variable 4301.Va kern.init_shutdown_timeout 4302and defaults to 120 seconds. 4303Setting the value of 4304.Va rcshutdown_timeout 4305to more than 120 seconds will have no effect until the 4306.Xr sysctl 8 4307variable 4308.Va kern.init_shutdown_timeout 4309is also increased. 4310.It Va virecover_enable 4311.Pq Vt bool 4312Set to 4313.Dq Li NO 4314to prevent the system from trying to 4315recover pre-maturely terminated 4316.Xr vi 1 4317sessions. 4318.It Va ugidfw_enable 4319.Pq Vt bool 4320Set to 4321.Dq Li YES 4322to load the 4323.Xr mac_bsdextended 4 4324module upon system initialization and load a default 4325ruleset file. 4326.It Va bsdextended_script 4327.Pq Vt str 4328The default 4329.Xr mac_bsdextended 4 4330ruleset file to load. 4331The default value of this variable is 4332.Pa /etc/rc.bsdextended . 4333.It Va newsyslog_enable 4334.Pq Vt bool 4335If set to 4336.Dq Li YES , 4337run 4338.Xr newsyslog 8 4339command at startup. 4340.It Va newsyslog_flags 4341.Pq Vt str 4342If 4343.Va newsyslog_enable 4344is set to 4345.Dq Li YES , 4346these are the flags to pass to the 4347.Xr newsyslog 8 4348program. 4349The default is 4350.Dq Li -CN , 4351which causes log files flagged with a 4352.Cm C 4353to be created. 4354.It Va mdconfig_md Ns Aq Ar X 4355.Pq Vt str 4356Arguments to 4357.Xr mdconfig 8 4358for 4359.Xr md 4 4360device 4361.Ar X . 4362At minimum a 4363.Fl t Ar type 4364must be specified and either a 4365.Fl s Ar size 4366for malloc or swap backed 4367.Xr md 4 4368devices or a 4369.Fl f Ar file 4370for vnode backed 4371.Xr md 4 4372devices. 4373Note that 4374.Va mdconfig_md Ns Aq Ar X 4375variables are evaluated until one variable is unset or null. 4376.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _newfs 4377.Pq Vt str 4378Optional arguments passed to 4379.Xr newfs 8 4380to initialize 4381.Xr md 4 4382device 4383.Ar X . 4384.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _owner 4385.Pq Vt str 4386An ownership specification passed to 4387.Xr chown 8 4388after the specified 4389.Xr md 4 4390device 4391.Ar X 4392has been mounted. 4393Both the 4394.Xr md 4 4395device and the mount point will be changed. 4396.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _perms 4397.Pq Vt str 4398A mode string passed to 4399.Xr chmod 1 4400after the specified 4401.Xr md 4 4402device 4403.Ar X 4404has been mounted. 4405Both the 4406.Xr md 4 4407device and the mount point will be changed. 4408.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _files 4409.Pq Vt str 4410Files to be copied to the mount point of the 4411.Xr md 4 4412device 4413.Ar X 4414after it has been mounted. 4415.It Va mdconfig_md Ns Ao Ar X Ac Ns Va _cmd 4416.Pq Vt str 4417Command to execute after the specified 4418.Xr md 4 4419device 4420.Ar X 4421has been mounted. 4422Note that the command is passed to 4423.Ic eval 4424and that both 4425.Va _dev 4426and 4427.Va _mp 4428variables can be used to reference respectively the 4429.Xr md 4 4430device and the mount point. 4431Assuming that the 4432.Xr md 4 4433device is 4434.Li md0 , 4435one could set the following: 4436.Bd -literal 4437mdconfig_md0_cmd="tar xfzC /var/file.tgz \e${_mp}" 4438.Ed 4439.It Va autobridge_interfaces 4440.Pq Vt str 4441Set to the list of bridge interfaces that will have newly arriving interfaces 4442checked against to be automatically added. 4443If not set to 4444.Dq Li NO 4445then for each whitespace separated 4446.Ar element 4447in the value, a 4448.Va autobridge_ Ns Aq Ar element 4449variable is assumed to exist which has a whitespace separated list of interface 4450names to match, these names can use wildcards. 4451For example: 4452.Bd -literal 4453autobridge_interfaces="bridge0" 4454autobridge_bridge0="tap* dc0 vlan[345]" 4455.Ed 4456.It Va mixer_enable 4457.Pq Vt bool 4458If set to 4459.Dq Li YES , 4460enable support for sound mixer. 4461.It Va hcsecd_enable 4462.Pq Vt bool 4463If set to 4464.Dq Li YES , 4465enable Bluetooth security daemon. 4466.It Va hcsecd_config 4467.Pq Vt str 4468Configuration file for 4469.Xr hcsecd 8 . 4470Default 4471.Pa /etc/bluetooth/hcsecd.conf . 4472.It Va sdpd_enable 4473.Pq Vt bool 4474If set to 4475.Dq Li YES , 4476enable Bluetooth Service Discovery Protocol daemon. 4477.It Va sdpd_control 4478.Pq Vt str 4479Path to 4480.Xr sdpd 8 4481control socket. 4482Default 4483.Pa /var/run/sdp . 4484.It Va sdpd_groupname 4485.Pq Vt str 4486Sets 4487.Xr sdpd 8 4488group to run as after it initializes. 4489Default 4490.Dq Li nobody . 4491.It Va sdpd_username 4492.Pq Vt str 4493Sets 4494.Xr sdpd 8 4495user to run as after it initializes. 4496Default 4497.Dq Li nobody . 4498.It Va bthidd_enable 4499.Pq Vt bool 4500If set to 4501.Dq Li YES , 4502enable Bluetooth Human Interface Device daemon. 4503.It Va bthidd_config 4504.Pq Vt str 4505Configuration file for 4506.Xr bthidd 8 . 4507Default 4508.Pa /etc/bluetooth/bthidd.conf . 4509.It Va bthidd_hids 4510.Pq Vt str 4511Path to a file, where 4512.Xr bthidd 8 4513will store information about known HID devices. 4514Default 4515.Pa /var/db/bthidd.hids . 4516.It Va rfcomm_pppd_server_enable 4517.Pq Vt bool 4518If set to 4519.Dq Li YES , 4520enable Bluetooth RFCOMM PPP wrapper daemon. 4521.It Va rfcomm_pppd_server_profile 4522.Pq Vt str 4523The name of the profile to use from 4524.Pa /etc/ppp/ppp.conf . 4525Multiple profiles can be specified here. 4526Also used to specify per-profile overrides. 4527When the profile name contains any of the characters 4528.Dq Li .-/+ 4529they are translated to 4530.Dq Li _ 4531for the proposes of the override variable names. 4532.It Va rfcomm_pppd_server_ Ns Ao Ar profile Ac Ns _bdaddr 4533.Pq Vt str 4534Overrides local address to listen on. 4535By default 4536.Xr rfcomm_pppd 8 4537will listen on 4538.Dq Li ANY 4539address. 4540The address can be specified as BD_ADDR or name. 4541.It Va rfcomm_pppd_server_ Ns Ao Ar profile Ac Ns _channel 4542.Pq Vt str 4543Overrides local RFCOMM channel to listen on. 4544By default 4545.Xr rfcomm_pppd 8 4546will listen on RFCOMM channel 1. 4547Must set properly if multiple profiles used in the same time. 4548.It Va rfcomm_pppd_server_ Ns Ao Ar profile Ac Ns _register_sp 4549.Pq Vt bool 4550Tells 4551.Xr rfcomm_pppd 8 4552if it should register Serial Port service on the specified RFCOMM channel. 4553Default 4554.Dq Li NO . 4555.It Va rfcomm_pppd_server_ Ns Ao Ar profile Ac Ns _register_dun 4556.Pq Vt bool 4557Tells 4558.Xr rfcomm_pppd 8 4559if it should register Dial-Up Networking service on the specified 4560RFCOMM channel. 4561Default 4562.Dq Li NO . 4563.It Va ubthidhci_enable 4564.Pq Vt bool 4565If set to 4566.Dq Li YES , 4567change the USB Bluetooth controller from HID mode to HCI mode. 4568You also need to specify the location of USB Bluetooth controller with the 4569.Va ubthidhci_busnum 4570and 4571.Va ubthidhci_addr 4572variables. 4573.It Va ubthidhci_busnum 4574Bus number where the USB Bluetooth controller is located. 4575Check the output of 4576.Xr usbconfig 8 4577on your system to find this information. 4578.It Va ubthidhci_addr 4579Bus address of the USB Bluetooth controller. 4580Check the output of 4581.Xr usbconfig 8 4582on your system to find this information. 4583.It Va netwait_enable 4584.Pq Vt bool 4585If set to 4586.Dq Li YES , 4587delays the start of network-reliant services until 4588.Va netwait_if 4589is up and ICMP packets to a destination defined in 4590.Va netwait_ip 4591are flowing. 4592Link state is examined first, followed by 4593.Dq Li pinging 4594an IP address to verify network usability. 4595If no destination can be reached or timeouts are exceeded, 4596network services are started anyway with no guarantee that 4597the network is usable. 4598Use of this variable requires both 4599.Va netwait_ip 4600and 4601.Va netwait_if 4602to be set. 4603.It Va netwait_ip 4604.Pq Vt str 4605Empty by default. 4606This variable contains a space-delimited list of IP addresses to 4607.Xr ping 8 . 4608DNS hostnames should not be used as resolution is not guaranteed 4609to be functional at this point. 4610If multiple IP addresses are specified, 4611each will be tried until one is successful or the list is exhausted. 4612.It Va netwait_timeout 4613.Pq Vt int 4614Indicates the total number of seconds to perform a 4615.Dq Li ping 4616against each IP address in 4617.Va netwait_ip , 4618at a rate of one ping per second. 4619If any of the pings are successful, 4620full network connectivity is considered reliable. 4621The default is 60. 4622.It Va netwait_if 4623.Pq Vt str 4624Empty by default. 4625Defines the name of the network interface on which watch for link. 4626.Xr ifconfig 8 4627is used to monitor the interface, looking for 4628.Dq Li status: no carrier . 4629Once gone, the link is considered up. 4630This can be a 4631.Xr vlan 4 4632interface if desired. 4633.It Va netwait_if_timeout 4634.Pq Vt int 4635Defines the total number of seconds to wait for link to become usable, 4636polled at a 1-second interval. 4637The default is 30. 4638.El 4639.Sh FILES 4640.Bl -tag -width ".Pa /etc/defaults/rc.conf" -compact 4641.It Pa /etc/defaults/rc.conf 4642.It Pa /etc/rc.conf 4643.It Pa /etc/rc.conf.local 4644.El 4645.Sh SEE ALSO 4646.Xr catman 1 , 4647.Xr chmod 1 , 4648.Xr gdb 1 , 4649.Xr info 1 , 4650.Xr kbdcontrol 1 , 4651.Xr makewhatis 1 , 4652.Xr sh 1 , 4653.Xr vi 1 , 4654.Xr vidcontrol 1 , 4655.Xr bridge 4 , 4656.Xr dummynet 4 , 4657.Xr ip 4 , 4658.Xr ipf 4 , 4659.Xr ipfw 4 , 4660.Xr ipnat 4 , 4661.Xr kld 4 , 4662.Xr pf 4 , 4663.Xr pflog 4 , 4664.Xr pfsync 4 , 4665.Xr tcp 4 , 4666.Xr udp 4 , 4667.Xr exports 5 , 4668.Xr fstab 5 , 4669.Xr ipf 5 , 4670.Xr ipnat 5 , 4671.Xr motd 5 , 4672.Xr newsyslog.conf 5 , 4673.Xr pf.conf 5 , 4674.Xr security 7 , 4675.Xr accton 8 , 4676.Xr amd 8 , 4677.Xr apm 8 , 4678.Xr atm 8 , 4679.Xr bthidd 8 , 4680.Xr chkprintcap 8 , 4681.Xr chown 8 , 4682.Xr cron 8 , 4683.Xr devfs 8 , 4684.Xr dhclient 8 , 4685.Xr ftpd 8 , 4686.Xr geli 8 , 4687.Xr hcsecd 8 , 4688.Xr ifconfig 8 , 4689.Xr inetd 8 , 4690.Xr ipf 8 , 4691.Xr ipfw 8 , 4692.Xr ipnat 8 , 4693.Xr jail 8 , 4694.Xr kldxref 8 , 4695.Xr lpd 8 , 4696.Xr mdconfig 8 , 4697.Xr mdmfs 8 , 4698.Xr mixer 8 , 4699.Xr mountd 8 , 4700.Xr moused 8 , 4701.Xr mrouted 8 , 4702.Xr named 8 , 4703.Xr newfs 8 , 4704.Xr newsyslog 8 , 4705.Xr nfsd 8 , 4706.Xr ntpd 8 , 4707.Xr ntpdate 8 , 4708.Xr pfctl 8 , 4709.Xr pflogd 8 , 4710.Xr ping 8 , 4711.Xr powerd 8 , 4712.Xr quotacheck 8 , 4713.Xr quotaon 8 , 4714.Xr rc 8 , 4715.Xr rc.sendmail 8 , 4716.Xr rfcomm_pppd 8 , 4717.Xr route 8 , 4718.Xr routed 8 , 4719.Xr rpcbind 8 , 4720.Xr rpc.lockd 8 , 4721.Xr rpc.statd 8 , 4722.Xr rwhod 8 , 4723.Xr savecore 8 , 4724.Xr sdpd 8 , 4725.Xr sshd 8 , 4726.Xr swapon 8 , 4727.Xr sysctl 8 , 4728.Xr syslogd 8 , 4729.Xr timed 8 , 4730.Xr usbconfig 8 , 4731.Xr wlandebug 8 , 4732.Xr yp 8 , 4733.Xr ypbind 8 , 4734.Xr ypserv 8 , 4735.Xr ypset 8 4736.Sh HISTORY 4737The 4738.Nm 4739file appeared in 4740.Fx 2.2.2 . 4741.Sh AUTHORS 4742.An Jordan K. Hubbard . 4743