On Wed, Jul 20, 2005 at 03:41:47PM -0700, Muk Dunkin wrote: > Does anyone know what's the reason why > net.inet.ip.fw.enable was set to 1 as the default? > I've tried setting it to 0 and reboot, > net.inet.ip.fw.enable was reset to 1. Being that, all > packets will go thru the firewall code even if there > was no active firewall rules in place.
changes to sysctls are not persistant. of course, you could program something to record the value on shutdown and restore on boot. that'd be overkill, look at the firewall_* directives for rc.conf. regardless, packets will not go very far into the firewall code if no rules are present. i would seriously doubt you could observe any performance difference. -- - bill fumerola / [EMAIL PROTECTED] _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to "[EMAIL PROTECTED]"
