| NOTES (61795) | NOTES (61837) |
|---|---|
| 1# 2# DOCS -- Lines that can be cut/pasted into kernel and hints configs. 3# 4# Lines that begin with 'device', 'options', 'machine', 'ident', 'maxusers', 5# 'makeoptions', 'hints' etc go into the kernel configuration that you 6# run config(8) with. 7# 8# Lines that begin with 'hints.' are NOT for config(8), they go into your 9# hints file. See /boot/device.hints and/or the 'hints' config(8) directive. 10# | 1# 2# DOCS -- Lines that can be cut/pasted into kernel and hints configs. 3# 4# Lines that begin with 'device', 'options', 'machine', 'ident', 'maxusers', 5# 'makeoptions', 'hints' etc go into the kernel configuration that you 6# run config(8) with. 7# 8# Lines that begin with 'hints.' are NOT for config(8), they go into your 9# hints file. See /boot/device.hints and/or the 'hints' config(8) directive. 10# |
| 11# $FreeBSD: head/sys/i386/conf/NOTES 61795 2000-06-18 06:59:13Z mjacob $ | 11# $FreeBSD: head/sys/i386/conf/NOTES 61837 2000-06-20 01:09:23Z alfred $ |
| 12# 13 14# 15# This directive is mandatory; it defines the architecture to be 16# configured for; in this case, the 386 family based IBM-PC and 17# compatibles. 18# 19machine i386 --- 516 unchanged lines hidden (view full) --- 536options IPV6FIREWALL_VERBOSE_LIMIT=100 537options IPV6FIREWALL_DEFAULT_TO_ACCEPT 538options IPDIVERT #divert sockets 539options IPFILTER #ipfilter support 540options IPFILTER_LOG #ipfilter logging 541options IPSTEALTH #support for stealth forwarding 542options TCPDEBUG 543 | 12# 13 14# 15# This directive is mandatory; it defines the architecture to be 16# configured for; in this case, the 386 family based IBM-PC and 17# compatibles. 18# 19machine i386 --- 516 unchanged lines hidden (view full) --- 536options IPV6FIREWALL_VERBOSE_LIMIT=100 537options IPV6FIREWALL_DEFAULT_TO_ACCEPT 538options IPDIVERT #divert sockets 539options IPFILTER #ipfilter support 540options IPFILTER_LOG #ipfilter logging 541options IPSTEALTH #support for stealth forwarding 542options TCPDEBUG 543 |
| 544# Statically Link in accept filters 545options ACCEPT_FILTER_DATA 546options ACCEPT_FILTER_HTTP 547 |
|
| 544# The following options add sysctl variables for controlling how certain 545# TCP packets are handled. 546# 547# TCP_DROP_SYNFIN adds support for ignoring TCP packets with SYN+FIN. This 548# prevents nmap et al. from identifying the TCP/IP stack, but breaks support 549# for RFC1644 extensions and is not recommended for web servers. 550# 551# TCP_RESTRICT_RST adds support for blocking the emission of TCP RST packets. --- 1916 unchanged lines hidden --- | 548# The following options add sysctl variables for controlling how certain 549# TCP packets are handled. 550# 551# TCP_DROP_SYNFIN adds support for ignoring TCP packets with SYN+FIN. This 552# prevents nmap et al. from identifying the TCP/IP stack, but breaks support 553# for RFC1644 extensions and is not recommended for web servers. 554# 555# TCP_RESTRICT_RST adds support for blocking the emission of TCP RST packets. --- 1916 unchanged lines hidden --- |