Re: Suggestion for Chapter 33 (firewalls) in FreeBSD handbook

Sergio Carlavilla <[email protected]>
Newsgroups gmane.os.freebsd.devel.documentation
Message-ID <CAFwocyMnPYKZsVeX_djTrOyyfROc9=kdbGAyPt20iNZHdMPaAA@mail.gmail.com>
On Thu, 23 Apr 2026 at 01:36, MP <[email protected]> wrote:
>
> I think that the "if firewall_type...configuration of the system" line in
> Chapter 33 of the Handbook under IPFW is confusing because it makes it seem
> like only the "client" or "simple" IPFW presets can be modified by the rules
> specified in /etc/rc.firewall. There is nothing mentioning that, for example,
> inbound ssh connections can be allowed on the workstation preset by using
> firewall_myservices and firewall_allowservices. Furthermore, there is nothing
> that I could easily find in the handbook or in /etc/rc.firewall that indicates
> that the modifications to the default rules should be added to /etc/rc.conf to
> persist across reboots.
>
> I think that there should be something in the handbook that says something
> like "configuring something like allowing inbound ssh connections to the
> workstation preset can be done by adding 'firewall_myservices="ssh"' and
> 'firewall_allowservices="any"' as found in /etc/rc.firewall to /etc/rc.conf"
> would be helpful. Or there at least could be something indicating that all
> presets can be modified by adding rules found in /etc/rc.firewall to /etc/
> rc.conf.
>
>
>

Hi,

Thank you so much for the suggestion.
I plan to run another Handbook Working Group after we finish with the
new design for the website.

If you want, I can also add you to the Working Group.

Bye!
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.