26.\"
27.Dd March 3, 2002
28.Dt RC.CONF 5
29.Os
30.Sh NAME
31.Nm rc.conf
32.Nd system configuration information
33.Sh DESCRIPTION
34The file
35.Nm
36contains descriptive information about the local host name, configuration
37details for any potential network interfaces and which services should be
38started up at system initial boot time.
39In new installations, the
40.Nm
41file is generally initialized by the system installation utility,
42.Xr sysinstall 8 .
43.Pp
44The purpose of
45.Nm
46is not to run commands or perform system startup actions
47directly.
48Instead, it is included by the
49various generic startup scripts in
50.Pa /etc
51which conditionalize their
52internal actions according to the settings found there.
53.Pp
54The
55.Pa /etc/rc.conf
56file is included from the file
57.Pa /etc/defaults/rc.conf ,
58which specifies the default settings for all the available options.
59Options need only be specified in
60.Pa /etc/rc.conf
61when the system administrator wishes to override these defaults.
62The file
63.Pa /etc/rc.conf.local
64is used to override settings in
65.Pa /etc/rc.conf
66for historical reasons.
67See the
68.Va rc_conf_files
69variable below.
70.Pp
71The following list provides a name and short description for each
72variable that can be set in the
73.Nm
74file:
75.Bl -tag -width indent-two
76.It Va swapfile
77.Pq Vt str
78If set to
79.Dq Li NO ,
80no swapfile is installed, otherwise the value is used as the full
81pathname to a file to use for additional swap space.
82.It Va apm_enable
83.Pq Vt bool
84If set to
85.Dq Li YES ,
86enable support for Automatic Power Management with
87the
88.Xr apm 8
89command.
90.It Va apmd_enable
91.Pq Vt bool
92Run
93.Xr apmd 8
94to handle APM event from userland.
95This also enables support for APM.
96.It Va apmd_flags
97.Pq Vt str
98If
99.Va apmd_enable
100is set to
101.Dq Li YES ,
102these are the flags to pass to the
103.Xr apmd 8
104daemon.
105.It Va devd_enable
106.Pq Vt bool
107Run
108.Xr devd 8
109to handle device added, removed or unknown events from the kernel.
110.It Va pccard_enable
111.Pq Vt bool
112If set to
113.Dq Li YES ,
114enable PCCARD support at boot time.
115.It Va pccard_mem
116.Pq Vt str
117Set to PCCARD controller memory address or
118.Dq Li DEFAULT
119for the default value.
120.It Va pccard_ifconfig
121.Pq Vt str
122List of arguments to be passed to
123.Xr ifconfig 8
124at boot time or on
125insertion of the card (e.g.\&
126.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0
127for a fixed address or
128.Dq Li DHCP
129for a DHCP client).
130.It Va pccard_beep
131.Pq Vt int
132If 0,
133set the PCCARD controller to silent mode.
134If 1,
135set it to beep mode.
136If 2,
137set it to melody mode.
138.It Va pccard_conf
139.Pq Vt str
140Path to the configuration file for the
141.Xr pccardd 8
142daemon (e.g.\&
143.Pa /etc/pccard.conf.sample ) .
144.It Va pccardd_flags
145.Pq Vt str
146If
147.Va pccard_enable
148is set to
149.Dq Li YES ,
150these are the flags to pass to the
151.Xr pccardd 8
152daemon.
153.It Va pccard_ether_delay
154.Pq Vt str
155Set the delay before starting
156.Xr dhclient 8
157in
158.Xr pccard_ether 8
159script.
160This defaults to 5 seconds to work around a bug in the
161.Xr ed 4
162driver which can lead to system hangs when using some newer
163.Xr ed 4
164based cards.
165.It Va removable_interfaces
166.Pq Vt str
167List of removable network interfaces to be supported by
168.Pa /etc/pccard_ether .
169.It Va local_startup
170.Pq Vt str
171List of directories to search for startup script files.
172.It Va script_name_sep
173.Pq Vt str
174The field separator to use for breaking down the list of startup script files
175into individual filenames.
176The default is a space.
177It is not necessary to change this unless there are startup scripts with names
178containing spaces.
179.It Va hostname
180.Pq Vt str
181The fully qualified domain name (FQDN) of this host on the network.
182This should almost certainly be set to something meaningful, even if
183there is no network connection.
184If
185.Xr dhclient 8
186is used to set the hostname via DHCP,
187this variable should be set to an empty string.
188.It Va nisdomainname
189.Pq Vt str
190The NIS domain name of this host, or
191.Dq Li NO
192if NIS is not used.
193.It Va dhcp_program
194.Pq Vt str
195Path to the DHCP client program
196.Pa ( /sbin/dhclient ,
197the ISC DHCP client,
198is the default).
199.It Va dhcp_flags
200.Pq Vt str
201Additional flags to pass to the DHCP client program.
202For the ISC DHCP client, see the
203.Xr dhclient 8
204manpage for a description of the command line options available.
205.It Va firewall_enable
206.Pq Vt bool
207Set to
208.Dq Li YES
209to load firewall rules at startup.
210If the kernel was not built with
211.Cd "options IPFIREWALL" ,
212the
213.Pa ipfw.ko
214kernel module will be loaded.
215See also
216.Va ipfilter_enable .
217.It Va firewall_script
218.Pq Vt str
219This variable specifies the full path to the firewall script to run.
220The default is
221.Pa /etc/rc.firewall .
222.It Va firewall_type
223.Pq Vt str
224Names the firewall type from the selection in
225.Pa /etc/rc.firewall ,
226or the file which contains the local firewall ruleset.
227Valid selections from
228.Pa /etc/rc.firewall
229are:
230.Pp
231.Bl -tag -width ".Li simple" -compact
232.It Li open
233unrestricted IP access
234.It Li closed
235all IP services disabled, except via
236.Dq Li lo0
237.It Li client
238basic protection for a workstation
239.It Li simple
240basic protection for a LAN.
241.El
242.Pp
243If a filename is specified, the full path
244must be given.
245.It Va firewall_quiet
246.Pq Vt bool
247Set to
248.Dq Li YES
249to disable the display of firewall rules on the console during boot.
250.It Va firewall_logging
251.Pq Vt bool
252Set to
253.Dq Li YES
254to enable firewall event logging.
255This is equivalent to the
256.Dv IPFIREWALL_VERBOSE
257kernel option.
258.It Va firewall_flags
259.Pq Vt str
260Flags passed to
261.Xr ipfw 8
262if
263.Va firewall_type
264specifies a filename.
265.It Va natd_program
266.Pq Vt str
267Path to
268.Xr natd 8 .
269.It Va natd_enable
270.Pq Vt bool
271Set to
272.Dq Li YES
273to enable
274.Xr natd 8 .
275.Va firewall_enable
276must also be set to
277.Dq Li YES ,
278and
279.Xr divert 4
280sockets must be enabled in the kernel.
281.It Va natd_interface
282.Pq Vt str
283This is the name of the public interface on which
284.Xr natd 8
285should run.
286The interface may be given as an interface name or as an IP address.
287.It Va natd_flags
288.Pq Vt str
289Additional
290.Xr natd 8
291flags should be placed here.
292The
293.Fl n
294or
295.Fl a
296flag is automatically added with the above
297.Va natd_interface
298as an argument.
299.\" ----- ipfilter_enable setting --------------------------------
300.It Va ipfilter_enable
301.Pq Vt bool
302Set to
303.Dq Li NO
304by default.
305Setting this to
306.Dq Li YES
307enables
308.Xr ipf 8
309packet filtering.
310.Pp
311Typical usage will require putting
312.Bd -literal
313ipfilter_enable="YES"
314ipnat_enable="YES"
315ipmon_enable="YES"
316ipfs_enable="YES"
317.Ed
318.Pp
319into
320.Pa /etc/rc.conf
321and editing
322.Pa /etc/ipf.rules
323and
324.Pa /etc/ipnat.rules
325appropriately.
326.Pp
327Note that
328.Va ipfilter_enable
329and
330.Va ipnat_enable
331can be enabled independently.
332.Va ipmon_enable
333and
334.Va ipfs_enable
335both require at least one of
336.Va ipfilter_enable
337and
338.Va ipnat_enable
339to be enabled.
340.Pp
341Having
342.Bd -literal
343options IPFILTER
344options IPFILTER_LOG
345options IPFILTER_DEFAULT_BLOCK
346.Ed
347.Pp
348in the kernel configuration file is a good idea, too.
349.\" ----- ipfilter_program setting ------------------------------
350.It Va ipfilter_program
351.Pq Vt str
352Path to
353.Xr ipf 8
354(default
355.Pa /sbin/ipf ) .
356.\" ----- ipfilter_rules setting --------------------------------
357.It Va ipfilter_rules
358.Pq Vt str
359Set to
360.Pa /etc/ipf.rules
361by default.
362This variable contains the name of the filter rule definition file.
363The file is expected to be readable for the
364.Xr ipf 8
365command to execute.
366.\" ----- ipfilter_flags setting --------------------------------
367.It Va ipfilter_flags
368.Pq Vt str
369Empty by default.
370This variable contains flags passed to the
371.Xr ipf 8
372program.
373.\" ----- ipnat_enable setting ----------------------------------
374.It Va ipnat_enable
375.Pq Vt bool
376Set to
377.Dq Li NO
378by default.
379Set it to
380.Dq Li YES
381to enable
382.Xr ipnat 1
383network address translation.
384See
385.Va ipfilter_enable
386for a detailed discussion.
387.\" ----- ipnat_program setting ---------------------------------
388.It Va ipnat_program
389.Pq Vt str
390Path to
391.Xr ipnat 1
392(default
393.Pa /sbin/ipnat ) .
394.\" ----- ipnat_rules setting -----------------------------------
395.It Va ipnat_rules
396.Pq Vt str
397Set to
398.Pa /etc/ipnat.rules
399by default.
400This variable contains the name of the file
401holding the network address translation definition.
402This file is expected to be readable for the
403.Xr ipnat 1
404command to execute.
405.\" ----- ipnat_flags setting -----------------------------------
406.It Va ipnat_flags
407.Pq Vt str
408Empty by default.
409This variable contains flags passed to the
410.Xr ipnat 1
411program.
412.\" ----- ipmon_enable setting ----------------------------------
413.It Va ipmon_enable
414.Pq Vt bool
415Set to
416.Dq Li NO
417by default.
418Set it to
419.Dq Li YES
420to enable
421.Xr ipmon 8
422monitoring (logging
423.Xr ipf 8
424and
425.Xr ipnat 1
426events).
427Setting this variable needs setting
428.Va ipfilter_enable
429or
430.Va ipnat_enable
431too.
432See
433.Va ipfilter_enable
434for a detailed discussion.
435.\" ----- ipmon_program setting ---------------------------------
436.It Va ipmon_program
437.Pq Vt str
438Path to
439.Xr ipmon 8
440(default
441.Pa /sbin/ipmon ) .
442.\" ----- ipmon_flags setting -----------------------------------
443.It Va ipmon_flags
444.Pq Vt str
445Set to
446.Dq Li -Ds
447by default.
448This variable contains flags passed to the
449.Xr ipmon 8
450program.
451Another typical example would be
452.Dq Fl D Pa /var/log/ipflog
453to have
454.Xr ipmon 8
455log directly to a file bypassing
456.Xr syslogd 8 .
457Make sure to adjust
458.Pa /etc/newsyslog.conf
459in such case like this:
460.Bd -literal
461/var/log/ipflog 640 10 100 * Z /var/run/ipmon.pid
462.Ed
463.\" ----- ipfs_enable setting -----------------------------------
464.It Va ipfs_enable
465.Pq Vt bool
466Set to
467.Dq Li NO
468by default.
469Set it to
470.Dq Li YES
471to enable
472.Xr ipfs 8
473saving the filter and NAT state tables during shutdown
474and reloading them during startup again.
475Setting this variable needs setting
476.Va ipfilter_enable
477or
478.Va ipnat_enable
479to
480.Dq Li YES
481too.
482See
483.Va ipfilter_enable
484for a detailed discussion.
485Note that if
486.Va kern_securelevel
487is set to 3,
488.Va ipfs_enable
489cannot be used
490because the raised securelevel will prevent
491.Xr ipfs 8
492from saving the state tables at shutdown time.
493.\" ----- ipfs_program setting ----------------------------------
494.It Va ipfs_program
495.Pq Vt str
496Path to
497.Xr ipfs 8
498(default
499.Pa /sbin/ipfs ) .
500.\" ----- ipfs_flags setting ------------------------------------
501.It Va ipfs_flags
502.Pq Vt str
503Empty by default.
504This variable contains flags passed to the
505.Xr ipfs 8
506program.
507.\" ----- end of added ipf hook ---------------------------------
508.It Va tcp_extensions
509.Pq Vt bool
510Set to
511.Dq Li YES
512by default.
513Setting this to
514.Dq Li NO
515disables certain TCP options as described by
516.Rs
517.%T "RFC 1323"
518.Re
519Setting this to
520.Dq Li NO
521might help remedy such problems with connections as randomly hanging
522or other weird behavior.
523Some network devices are known
524to be broken with respect to these options.
525.It Va log_in_vain
526.Pq Vt int
527Set to 0 by default.
528The
529.Xr sysctl 8
530variables,
531.Va net.inet.tcp.log_in_vain
532and
533.Va net.inet.udp.log_in_vain ,
534as described in
535.Xr tcp 4
536and
537.Xr udp 4 ,
538are set to the given value.
539.It Va tcp_keepalive
540.Pq Vt bool
541Set to
542.Dq Li YES
543by default.
544Setting to
545.Dq Li NO
546will disable probing idle TCP connections to verify that the
547peer is still up and reachable.
548.It Va tcp_drop_synfin
549.Pq Vt bool
550Set to
551.Dq Li NO
552by default.
553Setting to
554.Dq Li YES
555will cause the kernel to ignore TCP frames that have both
556the SYN and FIN flags set.
557This prevents OS fingerprinting, but may
558break some legitimate applications.
559This option is only available if the
560kernel was built with the
561.Dv TCP_DROP_SYNFIN
562option.
563.It Va icmp_drop_redirect
564.Pq Vt bool
565Set to
566.Dq Li NO
567by default.
568Setting to
569.Dq Li YES
570will cause the kernel to ignore ICMP REDIRECT packets.
571.It Va icmp_log_redirect
572.Pq Vt bool
573Set to
574.Dq Li NO
575by default.
576Setting to
577.Dq Li YES
578will cause the kernel to log ICMP REDIRECT packets.
579Note that
580the log messages are not rate-limited, so this option should only be used
581for troubleshooting networks.
582.It Va network_interfaces
583.Pq Vt str
584Set to the list of network interfaces to configure on this host.
585For example, if the only network devices in the system are the loopback
586device
587.Pq Li lo0
588and a NIC using the
589.Xr ed 4
590driver,
591this could be set to
592.Dq Li "lo0 ed0" .
593An
594.Va ifconfig_ Ns Aq Ar interface
595variable is also assumed to exist for each value of
596.Ar interface .
597It is also possible to add IP alias entries here in cases where
598multiple IP addresses registered against a single interface
599are desired.
600Assuming that the interface in question was
601.Li ed0 ,
602it might look
603something like this:
604.Bd -literal
605ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff"
606ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff"
607.Ed
608.Pp
609And so on.
610For each
611.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
612entry that is found,
613its contents are passed to
614.Xr ifconfig 8 .
615Execution stops at the first unsuccessful access, so if
616something like this is present:
617.Bd -literal
618ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff"
619ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff"
620ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff"
621ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff"
622.Ed
623.Pp
624Then note that alias4 would
625.Em not
626be added since the search would
627stop with the missing alias3 entry.
628.Pp
629It is possible to bring up an interface with DHCP by setting the
630.Va ifconfig_ Ns Aq Ar interface
631variable to
632.Dq Li DHCP .
633For instance, to initialize the
634.Li ed0
635device via DHCP,
636it is possible to use something like:
637.Bd -literal
638ifconfig_ed0="DHCP"
639.Ed
640.It Va cloned_interfaces
641.Pq Vt str
642Set to the list of clonable network interfaces to create on this host.
643Entries in
644.Va cloned_interfaces
645are automatically appended to
646.Va network_interfaces
647for configuration.
648.It Va gif_interfaces
649.Pq Vt str
650Set to the list of
651.Xr gif 4
652tunnel interfaces to configure on this host.
653A
654.Va gifconfig_ Ns Aq Ar interface
655variable is assumed to exist for each value of
656.Ar interface .
657The value of this variable is used to configure the link layer of the
658tunnel according to the syntax of the
659.Cm tunnel
660option to
661.Xr ifconfig 8 .
662Additionally, this option ensures that each listed interface is created
663via the
664.Cm create
665option to
666.Xr ifconfig 8
667before attempting to configure it.
668.It Va ppp_enable
669.Pq Vt bool
670If set to
671.Dq Li YES ,
672run the
673.Xr ppp 8
674daemon.
675.It Va ppp_mode
676.Pq Vt str
677Mode in which to run the
678.Xr ppp 8
679daemon.
680Accepted modes are
681.Dq Li auto ,
682.Dq Li ddial ,
683.Dq Li direct
684and
685.Dq Li dedicated .
686See the manual for a full description.
687.It Va ppp_nat
688.Pq Vt bool
689If set to
690.Dq Li YES ,
691enables network address translation.
692Used in conjunction with
693.Va gateway_enable
694allows hosts on private network addresses access to the Internet using
695this host as a network address translating router.
696.It Va ppp_profile
697.Pq Vt str
698The name of the profile to use from
699.Pa /etc/ppp/ppp.conf .
700.It Va ppp_user
701.Pq Vt str
702The name of the user under which
703.Xr ppp 8
704should be started.
705By
706default,
707.Xr ppp 8
708is started as
709.Dq Li root .
710.It Va rc_conf_files
711.Pq Vt str
712This option is used to specify a list of files that will override
713the settings in
714.Pa /etc/defaults/rc.conf .
715The files will be read in the order in which they are specified and should
716include the full path to the file.
717By default, the files specified are
718.Pa /etc/rc.conf
719and
720.Pa /etc/rc.conf.local
721.It Va fsck_y_enable
722.Pq Vt bool
723If set to
724.Dq Li YES ,
725.Xr fsck 8
726will be run with the
727.Fl y
728flag if the initial preen
729of the file systems fails.
730.It Va background_fsck
731.Pq Vt bool
732If set to
733.Dq Li YES ,
734the system will attempt to run
735.Xr fsck 8
736in the background where possible.
| 26.\"
27.Dd March 3, 2002
28.Dt RC.CONF 5
29.Os
30.Sh NAME
31.Nm rc.conf
32.Nd system configuration information
33.Sh DESCRIPTION
34The file
35.Nm
36contains descriptive information about the local host name, configuration
37details for any potential network interfaces and which services should be
38started up at system initial boot time.
39In new installations, the
40.Nm
41file is generally initialized by the system installation utility,
42.Xr sysinstall 8 .
43.Pp
44The purpose of
45.Nm
46is not to run commands or perform system startup actions
47directly.
48Instead, it is included by the
49various generic startup scripts in
50.Pa /etc
51which conditionalize their
52internal actions according to the settings found there.
53.Pp
54The
55.Pa /etc/rc.conf
56file is included from the file
57.Pa /etc/defaults/rc.conf ,
58which specifies the default settings for all the available options.
59Options need only be specified in
60.Pa /etc/rc.conf
61when the system administrator wishes to override these defaults.
62The file
63.Pa /etc/rc.conf.local
64is used to override settings in
65.Pa /etc/rc.conf
66for historical reasons.
67See the
68.Va rc_conf_files
69variable below.
70.Pp
71The following list provides a name and short description for each
72variable that can be set in the
73.Nm
74file:
75.Bl -tag -width indent-two
76.It Va swapfile
77.Pq Vt str
78If set to
79.Dq Li NO ,
80no swapfile is installed, otherwise the value is used as the full
81pathname to a file to use for additional swap space.
82.It Va apm_enable
83.Pq Vt bool
84If set to
85.Dq Li YES ,
86enable support for Automatic Power Management with
87the
88.Xr apm 8
89command.
90.It Va apmd_enable
91.Pq Vt bool
92Run
93.Xr apmd 8
94to handle APM event from userland.
95This also enables support for APM.
96.It Va apmd_flags
97.Pq Vt str
98If
99.Va apmd_enable
100is set to
101.Dq Li YES ,
102these are the flags to pass to the
103.Xr apmd 8
104daemon.
105.It Va devd_enable
106.Pq Vt bool
107Run
108.Xr devd 8
109to handle device added, removed or unknown events from the kernel.
110.It Va pccard_enable
111.Pq Vt bool
112If set to
113.Dq Li YES ,
114enable PCCARD support at boot time.
115.It Va pccard_mem
116.Pq Vt str
117Set to PCCARD controller memory address or
118.Dq Li DEFAULT
119for the default value.
120.It Va pccard_ifconfig
121.Pq Vt str
122List of arguments to be passed to
123.Xr ifconfig 8
124at boot time or on
125insertion of the card (e.g.\&
126.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0
127for a fixed address or
128.Dq Li DHCP
129for a DHCP client).
130.It Va pccard_beep
131.Pq Vt int
132If 0,
133set the PCCARD controller to silent mode.
134If 1,
135set it to beep mode.
136If 2,
137set it to melody mode.
138.It Va pccard_conf
139.Pq Vt str
140Path to the configuration file for the
141.Xr pccardd 8
142daemon (e.g.\&
143.Pa /etc/pccard.conf.sample ) .
144.It Va pccardd_flags
145.Pq Vt str
146If
147.Va pccard_enable
148is set to
149.Dq Li YES ,
150these are the flags to pass to the
151.Xr pccardd 8
152daemon.
153.It Va pccard_ether_delay
154.Pq Vt str
155Set the delay before starting
156.Xr dhclient 8
157in
158.Xr pccard_ether 8
159script.
160This defaults to 5 seconds to work around a bug in the
161.Xr ed 4
162driver which can lead to system hangs when using some newer
163.Xr ed 4
164based cards.
165.It Va removable_interfaces
166.Pq Vt str
167List of removable network interfaces to be supported by
168.Pa /etc/pccard_ether .
169.It Va local_startup
170.Pq Vt str
171List of directories to search for startup script files.
172.It Va script_name_sep
173.Pq Vt str
174The field separator to use for breaking down the list of startup script files
175into individual filenames.
176The default is a space.
177It is not necessary to change this unless there are startup scripts with names
178containing spaces.
179.It Va hostname
180.Pq Vt str
181The fully qualified domain name (FQDN) of this host on the network.
182This should almost certainly be set to something meaningful, even if
183there is no network connection.
184If
185.Xr dhclient 8
186is used to set the hostname via DHCP,
187this variable should be set to an empty string.
188.It Va nisdomainname
189.Pq Vt str
190The NIS domain name of this host, or
191.Dq Li NO
192if NIS is not used.
193.It Va dhcp_program
194.Pq Vt str
195Path to the DHCP client program
196.Pa ( /sbin/dhclient ,
197the ISC DHCP client,
198is the default).
199.It Va dhcp_flags
200.Pq Vt str
201Additional flags to pass to the DHCP client program.
202For the ISC DHCP client, see the
203.Xr dhclient 8
204manpage for a description of the command line options available.
205.It Va firewall_enable
206.Pq Vt bool
207Set to
208.Dq Li YES
209to load firewall rules at startup.
210If the kernel was not built with
211.Cd "options IPFIREWALL" ,
212the
213.Pa ipfw.ko
214kernel module will be loaded.
215See also
216.Va ipfilter_enable .
217.It Va firewall_script
218.Pq Vt str
219This variable specifies the full path to the firewall script to run.
220The default is
221.Pa /etc/rc.firewall .
222.It Va firewall_type
223.Pq Vt str
224Names the firewall type from the selection in
225.Pa /etc/rc.firewall ,
226or the file which contains the local firewall ruleset.
227Valid selections from
228.Pa /etc/rc.firewall
229are:
230.Pp
231.Bl -tag -width ".Li simple" -compact
232.It Li open
233unrestricted IP access
234.It Li closed
235all IP services disabled, except via
236.Dq Li lo0
237.It Li client
238basic protection for a workstation
239.It Li simple
240basic protection for a LAN.
241.El
242.Pp
243If a filename is specified, the full path
244must be given.
245.It Va firewall_quiet
246.Pq Vt bool
247Set to
248.Dq Li YES
249to disable the display of firewall rules on the console during boot.
250.It Va firewall_logging
251.Pq Vt bool
252Set to
253.Dq Li YES
254to enable firewall event logging.
255This is equivalent to the
256.Dv IPFIREWALL_VERBOSE
257kernel option.
258.It Va firewall_flags
259.Pq Vt str
260Flags passed to
261.Xr ipfw 8
262if
263.Va firewall_type
264specifies a filename.
265.It Va natd_program
266.Pq Vt str
267Path to
268.Xr natd 8 .
269.It Va natd_enable
270.Pq Vt bool
271Set to
272.Dq Li YES
273to enable
274.Xr natd 8 .
275.Va firewall_enable
276must also be set to
277.Dq Li YES ,
278and
279.Xr divert 4
280sockets must be enabled in the kernel.
281.It Va natd_interface
282.Pq Vt str
283This is the name of the public interface on which
284.Xr natd 8
285should run.
286The interface may be given as an interface name or as an IP address.
287.It Va natd_flags
288.Pq Vt str
289Additional
290.Xr natd 8
291flags should be placed here.
292The
293.Fl n
294or
295.Fl a
296flag is automatically added with the above
297.Va natd_interface
298as an argument.
299.\" ----- ipfilter_enable setting --------------------------------
300.It Va ipfilter_enable
301.Pq Vt bool
302Set to
303.Dq Li NO
304by default.
305Setting this to
306.Dq Li YES
307enables
308.Xr ipf 8
309packet filtering.
310.Pp
311Typical usage will require putting
312.Bd -literal
313ipfilter_enable="YES"
314ipnat_enable="YES"
315ipmon_enable="YES"
316ipfs_enable="YES"
317.Ed
318.Pp
319into
320.Pa /etc/rc.conf
321and editing
322.Pa /etc/ipf.rules
323and
324.Pa /etc/ipnat.rules
325appropriately.
326.Pp
327Note that
328.Va ipfilter_enable
329and
330.Va ipnat_enable
331can be enabled independently.
332.Va ipmon_enable
333and
334.Va ipfs_enable
335both require at least one of
336.Va ipfilter_enable
337and
338.Va ipnat_enable
339to be enabled.
340.Pp
341Having
342.Bd -literal
343options IPFILTER
344options IPFILTER_LOG
345options IPFILTER_DEFAULT_BLOCK
346.Ed
347.Pp
348in the kernel configuration file is a good idea, too.
349.\" ----- ipfilter_program setting ------------------------------
350.It Va ipfilter_program
351.Pq Vt str
352Path to
353.Xr ipf 8
354(default
355.Pa /sbin/ipf ) .
356.\" ----- ipfilter_rules setting --------------------------------
357.It Va ipfilter_rules
358.Pq Vt str
359Set to
360.Pa /etc/ipf.rules
361by default.
362This variable contains the name of the filter rule definition file.
363The file is expected to be readable for the
364.Xr ipf 8
365command to execute.
366.\" ----- ipfilter_flags setting --------------------------------
367.It Va ipfilter_flags
368.Pq Vt str
369Empty by default.
370This variable contains flags passed to the
371.Xr ipf 8
372program.
373.\" ----- ipnat_enable setting ----------------------------------
374.It Va ipnat_enable
375.Pq Vt bool
376Set to
377.Dq Li NO
378by default.
379Set it to
380.Dq Li YES
381to enable
382.Xr ipnat 1
383network address translation.
384See
385.Va ipfilter_enable
386for a detailed discussion.
387.\" ----- ipnat_program setting ---------------------------------
388.It Va ipnat_program
389.Pq Vt str
390Path to
391.Xr ipnat 1
392(default
393.Pa /sbin/ipnat ) .
394.\" ----- ipnat_rules setting -----------------------------------
395.It Va ipnat_rules
396.Pq Vt str
397Set to
398.Pa /etc/ipnat.rules
399by default.
400This variable contains the name of the file
401holding the network address translation definition.
402This file is expected to be readable for the
403.Xr ipnat 1
404command to execute.
405.\" ----- ipnat_flags setting -----------------------------------
406.It Va ipnat_flags
407.Pq Vt str
408Empty by default.
409This variable contains flags passed to the
410.Xr ipnat 1
411program.
412.\" ----- ipmon_enable setting ----------------------------------
413.It Va ipmon_enable
414.Pq Vt bool
415Set to
416.Dq Li NO
417by default.
418Set it to
419.Dq Li YES
420to enable
421.Xr ipmon 8
422monitoring (logging
423.Xr ipf 8
424and
425.Xr ipnat 1
426events).
427Setting this variable needs setting
428.Va ipfilter_enable
429or
430.Va ipnat_enable
431too.
432See
433.Va ipfilter_enable
434for a detailed discussion.
435.\" ----- ipmon_program setting ---------------------------------
436.It Va ipmon_program
437.Pq Vt str
438Path to
439.Xr ipmon 8
440(default
441.Pa /sbin/ipmon ) .
442.\" ----- ipmon_flags setting -----------------------------------
443.It Va ipmon_flags
444.Pq Vt str
445Set to
446.Dq Li -Ds
447by default.
448This variable contains flags passed to the
449.Xr ipmon 8
450program.
451Another typical example would be
452.Dq Fl D Pa /var/log/ipflog
453to have
454.Xr ipmon 8
455log directly to a file bypassing
456.Xr syslogd 8 .
457Make sure to adjust
458.Pa /etc/newsyslog.conf
459in such case like this:
460.Bd -literal
461/var/log/ipflog 640 10 100 * Z /var/run/ipmon.pid
462.Ed
463.\" ----- ipfs_enable setting -----------------------------------
464.It Va ipfs_enable
465.Pq Vt bool
466Set to
467.Dq Li NO
468by default.
469Set it to
470.Dq Li YES
471to enable
472.Xr ipfs 8
473saving the filter and NAT state tables during shutdown
474and reloading them during startup again.
475Setting this variable needs setting
476.Va ipfilter_enable
477or
478.Va ipnat_enable
479to
480.Dq Li YES
481too.
482See
483.Va ipfilter_enable
484for a detailed discussion.
485Note that if
486.Va kern_securelevel
487is set to 3,
488.Va ipfs_enable
489cannot be used
490because the raised securelevel will prevent
491.Xr ipfs 8
492from saving the state tables at shutdown time.
493.\" ----- ipfs_program setting ----------------------------------
494.It Va ipfs_program
495.Pq Vt str
496Path to
497.Xr ipfs 8
498(default
499.Pa /sbin/ipfs ) .
500.\" ----- ipfs_flags setting ------------------------------------
501.It Va ipfs_flags
502.Pq Vt str
503Empty by default.
504This variable contains flags passed to the
505.Xr ipfs 8
506program.
507.\" ----- end of added ipf hook ---------------------------------
508.It Va tcp_extensions
509.Pq Vt bool
510Set to
511.Dq Li YES
512by default.
513Setting this to
514.Dq Li NO
515disables certain TCP options as described by
516.Rs
517.%T "RFC 1323"
518.Re
519Setting this to
520.Dq Li NO
521might help remedy such problems with connections as randomly hanging
522or other weird behavior.
523Some network devices are known
524to be broken with respect to these options.
525.It Va log_in_vain
526.Pq Vt int
527Set to 0 by default.
528The
529.Xr sysctl 8
530variables,
531.Va net.inet.tcp.log_in_vain
532and
533.Va net.inet.udp.log_in_vain ,
534as described in
535.Xr tcp 4
536and
537.Xr udp 4 ,
538are set to the given value.
539.It Va tcp_keepalive
540.Pq Vt bool
541Set to
542.Dq Li YES
543by default.
544Setting to
545.Dq Li NO
546will disable probing idle TCP connections to verify that the
547peer is still up and reachable.
548.It Va tcp_drop_synfin
549.Pq Vt bool
550Set to
551.Dq Li NO
552by default.
553Setting to
554.Dq Li YES
555will cause the kernel to ignore TCP frames that have both
556the SYN and FIN flags set.
557This prevents OS fingerprinting, but may
558break some legitimate applications.
559This option is only available if the
560kernel was built with the
561.Dv TCP_DROP_SYNFIN
562option.
563.It Va icmp_drop_redirect
564.Pq Vt bool
565Set to
566.Dq Li NO
567by default.
568Setting to
569.Dq Li YES
570will cause the kernel to ignore ICMP REDIRECT packets.
571.It Va icmp_log_redirect
572.Pq Vt bool
573Set to
574.Dq Li NO
575by default.
576Setting to
577.Dq Li YES
578will cause the kernel to log ICMP REDIRECT packets.
579Note that
580the log messages are not rate-limited, so this option should only be used
581for troubleshooting networks.
582.It Va network_interfaces
583.Pq Vt str
584Set to the list of network interfaces to configure on this host.
585For example, if the only network devices in the system are the loopback
586device
587.Pq Li lo0
588and a NIC using the
589.Xr ed 4
590driver,
591this could be set to
592.Dq Li "lo0 ed0" .
593An
594.Va ifconfig_ Ns Aq Ar interface
595variable is also assumed to exist for each value of
596.Ar interface .
597It is also possible to add IP alias entries here in cases where
598multiple IP addresses registered against a single interface
599are desired.
600Assuming that the interface in question was
601.Li ed0 ,
602it might look
603something like this:
604.Bd -literal
605ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff"
606ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff"
607.Ed
608.Pp
609And so on.
610For each
611.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n
612entry that is found,
613its contents are passed to
614.Xr ifconfig 8 .
615Execution stops at the first unsuccessful access, so if
616something like this is present:
617.Bd -literal
618ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff"
619ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff"
620ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff"
621ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff"
622.Ed
623.Pp
624Then note that alias4 would
625.Em not
626be added since the search would
627stop with the missing alias3 entry.
628.Pp
629It is possible to bring up an interface with DHCP by setting the
630.Va ifconfig_ Ns Aq Ar interface
631variable to
632.Dq Li DHCP .
633For instance, to initialize the
634.Li ed0
635device via DHCP,
636it is possible to use something like:
637.Bd -literal
638ifconfig_ed0="DHCP"
639.Ed
640.It Va cloned_interfaces
641.Pq Vt str
642Set to the list of clonable network interfaces to create on this host.
643Entries in
644.Va cloned_interfaces
645are automatically appended to
646.Va network_interfaces
647for configuration.
648.It Va gif_interfaces
649.Pq Vt str
650Set to the list of
651.Xr gif 4
652tunnel interfaces to configure on this host.
653A
654.Va gifconfig_ Ns Aq Ar interface
655variable is assumed to exist for each value of
656.Ar interface .
657The value of this variable is used to configure the link layer of the
658tunnel according to the syntax of the
659.Cm tunnel
660option to
661.Xr ifconfig 8 .
662Additionally, this option ensures that each listed interface is created
663via the
664.Cm create
665option to
666.Xr ifconfig 8
667before attempting to configure it.
668.It Va ppp_enable
669.Pq Vt bool
670If set to
671.Dq Li YES ,
672run the
673.Xr ppp 8
674daemon.
675.It Va ppp_mode
676.Pq Vt str
677Mode in which to run the
678.Xr ppp 8
679daemon.
680Accepted modes are
681.Dq Li auto ,
682.Dq Li ddial ,
683.Dq Li direct
684and
685.Dq Li dedicated .
686See the manual for a full description.
687.It Va ppp_nat
688.Pq Vt bool
689If set to
690.Dq Li YES ,
691enables network address translation.
692Used in conjunction with
693.Va gateway_enable
694allows hosts on private network addresses access to the Internet using
695this host as a network address translating router.
696.It Va ppp_profile
697.Pq Vt str
698The name of the profile to use from
699.Pa /etc/ppp/ppp.conf .
700.It Va ppp_user
701.Pq Vt str
702The name of the user under which
703.Xr ppp 8
704should be started.
705By
706default,
707.Xr ppp 8
708is started as
709.Dq Li root .
710.It Va rc_conf_files
711.Pq Vt str
712This option is used to specify a list of files that will override
713the settings in
714.Pa /etc/defaults/rc.conf .
715The files will be read in the order in which they are specified and should
716include the full path to the file.
717By default, the files specified are
718.Pa /etc/rc.conf
719and
720.Pa /etc/rc.conf.local
721.It Va fsck_y_enable
722.Pq Vt bool
723If set to
724.Dq Li YES ,
725.Xr fsck 8
726will be run with the
727.Fl y
728flag if the initial preen
729of the file systems fails.
730.It Va background_fsck
731.Pq Vt bool
732If set to
733.Dq Li YES ,
734the system will attempt to run
735.Xr fsck 8
736in the background where possible.
|
737.It Va extra_netfs_types
738.Pq Vt str
739If set to something other than
740.Dq Li NO
741(the default),
742this variable extends the list of file system types
743for which automatic mounting at startup by
744.Xr rc 8
745should be delayed until the network is initialized.
746It should contain
747a whitespace-separated list of network file system descriptor pairs,
748each consisting of a file system type as passed to
749.Xr mount 8
750and a human-readable, one-word description,
751joined with a colon
752.Pq Ql \&: .
753Extending the default list in this way is only necessary
754when third party file system types are used.
755.It Va syslogd_enable
756.Pq Vt bool
757If set to
758.Dq Li YES ,
759run the
760.Xr syslogd 8
761daemon.
762.It Va syslogd_program
763.Pq Vt str
764Path to
765.Xr syslogd 8
766(default
767.Pa /usr/sbin/syslogd ) .
768.It Va syslogd_flags
769.Pq Vt str
770If
771.Va syslogd_enable
772is set to
773.Dq Li YES ,
774these are the flags to pass to
775.Xr syslogd 8 .
776.It Va inetd_enable
777.Pq Vt bool
778If set to
779.Dq Li YES ,
780run the
781.Xr inetd 8
782daemon.
783.It Va inetd_program
784.Pq Vt str
785Path to
786.Xr inetd 8
787(default
788.Pa /usr/sbin/inetd ) .
789.It Va inetd_flags
790.Pq Vt str
791If
792.Va inetd_enable
793is set to
794.Dq Li YES ,
795these are the flags to pass to
796.Xr inetd 8 .
797.It Va named_enable
798.Pq Vt bool
799If set to
800.Dq Li YES ,
801run the
802.Xr named 8
803daemon.
804.It Va named_program
805.Pq Vt str
806Path to
807.Xr named 8
808(default
809.Pa /usr/sbin/named ) .
810.It Va named_flags
811.Pq Vt str
812If
813.Va named_enable
814is set to
815.Dq Li YES ,
816these are the flags to pass to
817.Xr named 8 .
818.It Va kerberos4_server_enable
819.Pq Vt bool
820Set to
821.Dq Li YES
822to start a Kerberos IV authentication server
823at boot time.
824.It Va kadmind4_server_enable
825.Pq Vt bool
826Set to
827.Dq Li YES
828to start
829.Xr kadmind 8 ,
830the Kerberos IV Administration Daemon; set to
831.Dq Li NO
832on a slave server.
833.It Va kerberos_stash
834.Pq Vt str
835If
836.Dq Li YES ,
837instruct the Kerberos servers to use the stashed master key instead of
838prompting for it (only if
839.Va kerberos_server_enable
840is set to
841.Dq Li YES ,
842and is used for both
843.Xr kerberos 1
844and
845.Xr kadmind 8 ) .
846.It Va kerberos5_server_enable
847.Pq Vt bool
848Set to
849.Dq Li YES
850to start a Kerberos 5 authentication server
851at boot time.
852.It Va kadmind5_server_enable
853.Pq Vt bool
854Set to
855.Dq Li YES
856to start
857.Xr k5admind 8 ,
858the Kerberos 5 Administration Daemon; set to
859.Dq Li NO
860on a slave server.
861.It Va rwhod_enable
862.Pq Vt bool
863If set to
864.Dq Li YES ,
865run the
866.Xr rwhod 8
867daemon at boot time.
868.It Va rwhod_flags
869.Pq Vt str
870If
871.Va rwhod_enable
872is set to
873.Dq Li YES ,
874these are the flags to pass to it.
875.It Va amd_enable
876.Pq Vt bool
877If set to
878.Dq Li YES ,
879run the
880.Xr amd 8
881daemon at boot time.
882.It Va amd_flags
883.Pq Vt str
884If
885.Va amd_enable
886is set to
887.Dq Li YES ,
888these are the flags to pass to it.
889See the
890.Xr amd 8
891manpage for more information.
892.It Va amd_map_program
893.Pq Vt str
894If set,
895the specified program is run to get the list of
896.Xr amd 8
897maps.
898For example, if the
899.Xr amd 8
900maps are stored in NIS, one can set this to
901run
902.Xr ypcat 1
903to get a list of
904.Xr amd 8
905maps from the
906.Pa amd.master
907NIS map.
908.It Va update_motd
909.Pq Vt bool
910If set to
911.Dq Li YES ,
912.Pa /etc/motd
913will be updated at boot time to reflect the kernel release
914being run.
915If set to
916.Dq Li NO ,
917.Pa /etc/motd
918will not be updated.
919.It Va nfs_client_enable
920.Pq Vt bool
921If set to
922.Dq Li YES ,
923run the NFS client daemons at boot time.
924.It Va nfs_access_cache
925.Pq Vt int
926If
927.Va nfs_client_enable
928is set to
929.Dq Li YES ,
930this can be set to
931.Dq Li 0
932to disable NFS ACCESS RPC caching, or to the number of seconds for which
933NFS ACCESS
934results should be cached.
935A value of 2-10 seconds will substantially reduce network
936traffic for many NFS operations.
937.It Va nfs_server_enable
938.Pq Vt bool
939If set to
940.Dq Li YES ,
941run the NFS server daemons at boot time.
942.It Va nfs_server_flags
943.Pq Vt str
944If
945.Va nfs_server_enable
946is set to
947.Dq Li YES ,
948these are the flags to pass to the
949.Xr nfsd 8
950daemon.
951.It Va mountd_enable
952.Pq Vt bool
953If set to
954.Dq Li YES ,
955and no
956.Va nfs_server_enable
957is set, start
958.Xr mountd 8 ,
959but not
960.Xr nfsd 8
961daemon.
962It is commonly needed to run CFS without real NFS used.
963.It Va weak_mountd_authentication
964.Pq Vt bool
965If set to
966.Dq Li YES ,
967allow services like PCNFSD to make non-privileged mount
968requests.
969.It Va nfs_privport
970.Pq Vt bool
971If set to
972.Dq Li YES ,
973provide NFS services only on a secure port.
974.It Va nfs_bufpackets
975.Pq Vt int
976If set to a number, indicates the number of packets worth of
977socket buffer space to reserve on an NFS client.
978If set to
979.Dq Li DEFAULT ,
980the kernel default is used (typically 4).
981Using a higher number may be
982useful on gigabit networks to improve performance.
983The minimum value is
9842 and the maximum is 64.
985.It Va rpc_lockd_enable
986.Pq Vt bool
987If set to
988.Dq Li YES
989and also an NFS server, run
990.Xr rpc.lockd 8
991at boot time.
992.It Va rpc_statd_enable
993.Pq Vt bool
994If set to
995.Dq Li YES
996and also an NFS server, run
997.Xr rpc.statd 8
998at boot time.
999.It Va rpcbind_program
1000.Pq Vt str
1001Path to
1002.Xr rpcbind 8
1003(default
1004.Pa /usr/sbin/rpcbind ) .
1005.It Va rpcbind_enable
1006.Pq Vt bool
1007If set to
1008.Dq Li YES ,
1009run the
1010.Xr rpcbind 8
1011service at boot time.
1012.It Va rpcbind_flags
1013.Pq Vt str
1014If
1015.Va rpcbind_enable
1016is set to
1017.Dq Li YES ,
1018these are the flags to pass to the
1019.Xr rpcbind 8
1020daemon.
1021.It Va xtend_enable
1022.Pq Vt bool
1023If set to
1024.Dq Li YES ,
1025run the
1026.Xr xtend 8
1027daemon at boot time.
1028.It Va xtend_flags
1029.Pq Vt str
1030If
1031.Va xtend_enable
1032is set to
1033.Dq Li YES ,
1034these are the flags to pass to the
1035.Xr xtend 8
1036daemon.
1037.It Va pppoed_enable
1038.Pq Vt bool
1039If set to
1040.Dq Li YES ,
1041run the
1042.Xr pppoed 8
1043daemon at boot time to provide PPP over Ethernet services.
1044.It Va pppoed_ Ns Ar provider
1045.Pq Vt str
1046.Xr pppoed 8
1047listens to requests to this
1048.Ar provider
1049and ultimately runs
1050.Xr ppp 8
1051with a
1052.Ar system
1053argument of the same name.
1054.It Va pppoed_flags
1055.Pq Vt str
1056Additional flags to pass to
1057.Xr pppoed 8 .
1058.It Va pppoed_interface
1059.Pq Vt str
1060The network interface to run
1061.Xr pppoed 8
1062on.
1063This is mandatory when
1064.Va pppoed_enable
1065is set to
1066.Dq Li YES .
1067.It Va timed_enable
1068.Pq Vt boot
1069If set to
1070.Dq Li YES ,
1071run the
1072.Xr timed 8
1073service at boot time.
1074This command is intended for networks of
1075machines where a consistent
1076.Dq "network time"
1077for all hosts must be established.
1078This is often useful in large NFS
1079environments where time stamps on files are expected to be consistent
1080network-wide.
1081.It Va timed_flags
1082.Pq Vt str
1083If
1084.Va timed_enable
1085is set to
1086.Dq Li YES ,
1087these are the flags to pass to the
1088.Xr timed 8
1089service.
1090.It Va ntpdate_enable
1091.Pq Vt bool
1092If set to
1093.Dq Li YES ,
1094run
1095.Xr ntpdate 8
1096at system startup.
1097This command is intended to
1098synchronize the system clock only
1099.Em once
1100from some standard reference.
1101An option to set this up initially
1102(from a list of known servers) is also provided by the
1103.Xr sysinstall 8
1104program when the system is first installed.
1105.It Va ntpdate_program
1106.Pq Vt str
1107Path to
1108.Xr ntpdate 8
1109(default
1110.Pa /usr/sbin/ntpdate ) .
1111.It Va ntpdate_flags
1112.Pq Vt str
1113If
1114.Va ntpdate_enable
1115is set to
1116.Dq Li YES ,
1117these are the flags to pass to the
1118.Xr ntpdate 8
1119command (typically a hostname).
1120.It Va ntpd_enable
1121.Pq Vt bool
1122If set to
1123.Dq Li YES ,
1124run the
1125.Xr ntpd 8
1126command at boot time.
1127.It Va ntpd_program
1128.Pq Vt str
1129Path to
1130.Xr ntpd 8
1131(default
1132.Pa /usr/sbin/ntpd ) .
1133.It Va ntpd_flags
1134.Pq Vt str
1135If
1136.Va ntpd_enable
1137is set to
1138.Dq Li YES ,
1139these are the flags to pass to the
1140.Xr ntpd 8
1141daemon.
1142.It Va nis_client_enable
1143.Pq Vt bool
1144If set to
1145.Dq Li YES ,
1146run the
1147.Xr ypbind 8
1148service at system boot time.
1149.It Va nis_client_flags
1150.Pq Vt str
1151If
1152.Va nis_client_enable
1153is set to
1154.Dq Li YES ,
1155these are the flags to pass to the
1156.Xr ypbind 8
1157service.
1158.It Va nis_ypset_enable
1159.Pq Vt bool
1160If set to
1161.Dq Li YES ,
1162run the
1163.Xr ypset 8
1164daemon at system boot time.
1165.It Va nis_ypset_flags
1166.Pq Vt str
1167If
1168.Va nis_ypset_enable
1169is set to
1170.Dq Li YES ,
1171these are the flags to pass to the
1172.Xr ypset 8
1173daemon.
1174.It Va nis_server_enable
1175.Pq Vt bool
1176If set to
1177.Dq Li YES ,
1178run the
1179.Xr ypserv 8
1180daemon at system boot time.
1181.It Va nis_server_flags
1182.Pq Vt str
1183If
1184.Va nis_server_enable
1185is set to
1186.Dq Li YES ,
1187these are the flags to pass to the
1188.Xr ypserv 8
1189daemon.
1190.It Va nis_ypxfrd_enable
1191.Pq Vt bool
1192If set to
1193.Dq Li YES ,
1194run the
1195.Xr rpc.ypxfrd 8
1196daemon at system boot time.
1197.It Va nis_ypxfrd_flags
1198.Pq Vt str
1199If
1200.Va nis_ypxfrd_enable
1201is set to
1202.Dq Li YES ,
1203these are the flags to pass to the
1204.Xr rpc.ypxfrd 8
1205daemon.
1206.It Va nis_yppasswdd_enable
1207.Pq Vt bool
1208If set to
1209.Dq Li YES ,
1210run the
1211.Xr rpc.yppasswdd 8
1212daemon at system boot time.
1213.It Va nis_yppasswdd_flags
1214.Pq Vt str
1215If
1216.Va nis_yppasswdd_enable
1217is set to
1218.Dq Li YES ,
1219these are the flags to pass to the
1220.Xr rpc.yppasswdd 8
1221daemon.
1222.It Va defaultrouter
1223.Pq Vt str
1224If not set to
1225.Dq Li NO ,
1226create a default route to this host name or IP address
1227(use an IP address if this router is also required to get to the
1228name server!).
1229.It Va static_routes
1230.Pq Vt str
1231Set to the list of static routes that are to be added at system
1232boot time.
1233If not set to
1234.Dq Li NO
1235then for each whitespace separated
1236.Ar element
1237in the value, a
1238.Va route_ Ns Aq Ar element
1239variable is assumed to exist
1240whose contents will later be passed to a
1241.Dq Nm route Cm add
1242operation.
1243.It Va gateway_enable
1244.Pq Vt bool
1245If set to
1246.Dq Li YES ,
1247configure host to act as an IP router, e.g. to forward packets
1248between interfaces.
1249.It Va router_enable
1250.Pq Vt bool
1251If set to
1252.Dq Li YES ,
1253run a routing daemon of some sort, based on the
1254settings of
1255.Va router
1256and
1257.Va router_flags .
1258.It Va router
1259.Pq Vt str
1260If
1261.Va router_enable
1262is set to
1263.Dq Li YES ,
1264this is the name of the routing daemon to use.
1265.It Va router_flags
1266.Pq Vt str
1267If
1268.Va router_enable
1269is set to
1270.Dq Li YES ,
1271these are the flags to pass to the routing daemon.
1272.It Va mrouted_enable
1273.Pq Vt bool
1274If set to
1275.Dq Li YES ,
1276run the multicast routing daemon,
1277.Xr mrouted 8 .
1278.It Va mrouted_flags
1279.Pq Vt str
1280If
1281.Va mrouted_enable
1282is set to
1283.Dq Li YES ,
1284these are the flags to pass to the
1285.Xr mrouted 8
1286daemon.
1287.It Va ipxgateway_enable
1288.Pq Vt bool
1289If set to
1290.Dq Li YES ,
1291enable the routing of IPX traffic.
1292.It Va ipxrouted_enable
1293.Pq Vt bool
1294If set to
1295.Dq Li YES ,
1296run the
1297.Xr IPXrouted 8
1298daemon at system boot time.
1299.It Va ipxrouted_flags
1300.Pq Vt str
1301If
1302.Va ipxrouted_enable
1303is set to
1304.Dq Li YES ,
1305these are the flags to pass to the
1306.Xr IPXrouted 8
1307daemon.
1308.It Va arpproxy_all
1309.Pq Vt bool
1310If set to
1311.Dq Li YES ,
1312enable global proxy ARP.
1313.It Va forward_sourceroute
1314.Pq Vt bool
1315If set to
1316.Dq Li YES
1317and
1318.Va gateway_enable
1319is also set to
1320.Dq Li YES ,
1321source-routed packets are forwarded.
1322.It Va accept_sourceroute
1323.Pq Vt bool
1324If set to
1325.Dq Li YES ,
1326the system will accept source-routed packets directed at it.
1327.It Va rarpd_enable
1328.Pq Vt bool
1329If set to
1330.Dq Li YES ,
1331run the
1332.Xr rarpd 8
1333daemon at system boot time.
1334.It Va rarpd_flags
1335.Pq Vt str
1336If
1337.Va rarpd_enable
1338is set to
1339.Dq Li YES ,
1340these are the flags to pass to the
1341.Xr rarpd 8
1342daemon.
1343.It Va bootparamd_enable
1344.Pq Vt bool
1345If set to
1346.Dq Li YES ,
1347run the
1348.Xr bootparamd 8
1349daemon at system boot time.
1350.It Va bootparamd_flags
1351.Pq Vt str
1352If
1353.Va bootparamd_enable
1354is set to
1355.Dq Li YES ,
1356these are the flags to pass to the
1357.Xr bootparamd 8
1358daemon.
1359.It Va atm_enable
1360.Pq Vt bool
1361Set to
1362.Dq Li YES
1363to enable the configuration of ATM interfaces at system boot time.
1364For all of the ATM variables described below, please refer to the
1365.Xr atm 8
1366man page for further details on the available command parameters.
1367Also refer to the files in
1368.Pa /usr/share/examples/atm
1369for more detailed configuration information.
1370.It Va atm_netif_ Ns Aq Ar intf
1371.Pq Vt str
1372For the ATM physical interface
1373.Ar intf ,
1374this variable defines the name prefix and count for the ATM network
1375interfaces to be created.
1376The value will be passed as the parameters of an
1377.Dq Nm atm Cm "set netif" Ar intf
1378command.
1379.It Va atm_sigmgr_ Ns Aq Ar intf
1380.Pq Vt str
1381For the ATM physical interface
1382.Ar intf ,
1383this variable defines the ATM signalling manager to be used.
1384The value will be passed as the parameters of an
1385.Dq Nm atm Cm attach Ar intf
1386command.
1387.It Va atm_prefix_ Ns Aq Ar intf
1388.Pq Vt str
1389For the ATM physical interface
1390.Ar intf ,
1391this variable defines the NSAP prefix for interfaces using a UNI signalling
1392manager.
1393If set to
1394.Dq Li ILMI ,
1395the prefix will automatically be set via the
1396.Xr ilmid 8
1397daemon.
1398Otherwise, the value will be passed as the parameters of an
1399.Dq Nm atm Cm "set prefix" Ar intf
1400command.
1401.It Va atm_macaddr_ Ns Aq Ar intf
1402.Pq Vt str
1403For the ATM physical interface
1404.Ar intf ,
1405this variable defines the MAC address for interfaces using a UNI signalling
1406manager.
1407If set to
1408.Dq Li NO ,
1409the hardware MAC address contained in the ATM interface card will be used.
1410Otherwise, the value will be passed as the parameters of an
1411.Dq Nm atm Cm "set mac" Ar intf
1412command.
1413.It Va atm_arpserver_ Ns Aq Ar netif
1414.Pq Vt str
1415For the ATM network interface
1416.Ar netif ,
1417this variable defines the ATM address for a host which is to provide ATMARP
1418service.
1419This variable is only applicable to interfaces using a UNI signalling
1420manager.
1421If set to
1422.Dq Li local ,
1423this host will become an ATMARP server.
1424The value will be passed as the parameters of an
1425.Dq Nm atm Cm "set arpserver" Ar netif
1426command.
1427.It Va atm_scsparp_ Ns Aq Ar netif
1428.Pq Vt bool
1429If set to
1430.Dq Li YES ,
1431SCSP/ATMARP service for the network interface
1432.Ar netif
1433will be initiated using the
1434.Xr scspd 8
1435and
1436.Xr atmarpd 8
1437daemons.
1438This variable is only applicable if
1439.Va atm_arpserver_ Ns Aq Ar netif
1440is set to
1441.Dq Li local .
1442.It Va atm_pvcs
1443.Pq Vt str
1444Set to the list of ATM PVCs to be added at system
1445boot time.
1446For each whitespace separated
1447.Ar element
1448in the value, an
1449.Va atm_pvc_ Ns Aq Ar element
1450variable is assumed to exist.
1451The value of each of these variables
1452will be passed as the parameters of an
1453.Dq Nm atm Cm "add pvc"
1454command.
1455.It Va atm_arps
1456.Pq Vt str
1457Set to the list of permanent ATM ARP entries to be added
1458at system boot time.
1459For each whitespace separated
1460.Ar element
1461in the value, an
1462.Va atm_arp_ Ns Aq Ar element
1463variable is assumed to exist.
1464The value of each of these variables
1465will be passed as the parameters of an
1466.Dq Nm atm Cm "add arp"
1467command.
1468.It Va keymap
1469.Pq Vt str
1470If set to
1471.Dq Li NO ,
1472no keymap is installed, otherwise the value is used to install
1473the keymap file in
1474.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd .
1475.It Va keyrate
1476.Pq Vt str
1477The keyboard repeat speed.
1478Set to
1479.Dq Li slow ,
1480.Dq Li normal ,
1481.Dq Li fast ,
1482or
1483.Dq Li NO
1484if the default behavior is desired.
1485.It Va keychange
1486.Pq Vt str
1487If not set to
1488.Dq Li NO ,
1489attempt to program the function keys with the value.
1490The value should
1491be a single string of the form:
1492.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... .
1493.It Va cursor
1494.Pq Vt str
1495Can be set to the value of
1496.Dq Li normal ,
1497.Dq Li blink ,
1498.Dq Li destructive ,
1499or
1500.Dq Li NO
1501to set the cursor behavior explicitly or choose the default behavior.
1502.It Va scrnmap
1503.Pq Vt str
1504If set to
1505.Dq Li NO ,
1506no screen map is installed, otherwise the value is used to install
1507the screen map file in
1508.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value .
1509.It Va font8x16
1510.Pq Vt str
1511If set to
1512.Dq Li NO ,
1513the default 8x16 font value is used for screen size requests, otherwise
1514the value in
1515.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1516is used.
1517.It Va font8x14
1518.Pq Vt str
1519If set to
1520.Dq Li NO ,
1521the default 8x14 font value is used for screen size requests, otherwise
1522the value in
1523.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1524is used.
1525.It Va font8x8
1526.Pq Vt str
1527If set to
1528.Dq Li NO ,
1529the default 8x8 font value is used for screen size requests, otherwise
1530the value in
1531.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1532is used.
1533.It Va blanktime
1534.Pq Vt int
1535If set to
1536.Dq Li NO ,
1537the default screen blanking interval is used, otherwise it is set
1538to
1539.Ar value
1540seconds.
1541.It Va saver
1542.Pq Vt str
1543If not set to
1544.Dq Li NO ,
1545this is the actual screen saver to use
1546.Li ( blank , snake , daemon ,
1547etc).
1548.It Va moused_enable
1549.Pq Vt str
1550If set to
1551.Dq Li YES ,
1552the
1553.Xr moused 8
1554daemon is started for doing cut/paste selection on the console.
1555.It Va moused_type
1556.Pq Vt str
1557This is the protocol type of the mouse connected to this host.
1558This variable must be set if
1559.Va moused_enable
1560is set to
1561.Dq Li YES .
1562The
1563.Xr moused 8
1564daemon
1565is able to detect the appropriate mouse type automatically in many cases.
1566Set this variable to
1567.Dq Li auto
1568to let the daemon detect it, or
1569select one from the following list if the automatic detection fails.
1570.Pp
1571If the mouse is attached to the PS/2 mouse port, choose
1572.Dq Li auto
1573or
1574.Dq Li ps/2 ,
1575regardless of the brand and model of the mouse.
1576Likewise, if the
1577mouse is attached to the bus mouse port, choose
1578.Dq Li auto
1579or
1580.Dq Li busmouse .
1581All other protocols are for serial mice and will not work with
1582the PS/2 and bus mice.
1583If this is a USB mouse,
1584.Dq Li auto
1585is the only protocol type which will work.
1586.Pp
1587.Bl -tag -width ".Li x10mouseremote" -compact
1588.It Li microsoft
1589Microsoft mouse (serial)
1590.It Li intellimouse
1591Microsoft IntelliMouse (serial)
1592.It Li mousesystems
1593Mouse systems Corp. mouse (serial)
1594.It Li mmseries
1595MM Series mouse (serial)
1596.It Li logitech
1597Logitech mouse (serial)
1598.It Li busmouse
1599A bus mouse
1600.It Li mouseman
1601Logitech MouseMan and TrackMan (serial)
1602.It Li glidepoint
1603ALPS GlidePoint (serial)
1604.It Li thinkingmouse
1605Kensington ThinkingMouse (serial)
1606.It Li ps/2
1607PS/2 mouse
1608.It Li mmhittab
1609MM HitTablet (serial)
1610.It Li x10mouseremote
1611X10 MouseRemote (serial)
1612.It Li versapad
1613Interlink VersaPad (serial)
1614.El
1615.Pp
1616Even if the mouse is not in the above list, it may be compatible
1617with one in the list.
1618Refer to the man page for
1619.Xr moused 8
1620for compatibility information.
1621.Pp
1622It should also be noted that while this is enabled, any
1623other client of the mouse (such as an X server) should access
1624the mouse through the virtual mouse device,
1625.Pa /dev/sysmouse ,
1626and configure it as a
1627.Dq Li sysmouse
1628type mouse, since all
1629mouse data is converted to this single canonical format when
1630using
1631.Xr moused 8 .
1632If the client program does not support the
1633.Dq Li sysmouse
1634type,
1635specify the
1636.Dq Li mousesystems
1637type.
1638It is the second preferred type.
1639.It Va moused_port
1640.Pq Vt str
1641If
1642.Va moused_enable
1643is set to
1644.Dq Li YES ,
1645this is the actual port the mouse is on.
1646It might be
1647.Pa /dev/cuaa0
1648for a COM1 serial mouse,
1649.Pa /dev/psm0
1650for a PS/2 mouse or
1651.Pa /dev/mse0
1652for a bus mouse, for example.
1653.It Va moused_flags
1654.Pq Vt str
1655If
1656.Va moused_type
1657is set, these are the additional flags to pass to the
1658.Xr moused 8
1659daemon.
1660.It Va mousechar_start
1661.Pq Vt int
1662If set to
1663.Dq Li NO ,
1664the default mouse cursor character range
1665.Li 0xd0 Ns - Ns Li 0xd3
1666is used,
1667otherwise the range start is set
1668to
1669.Ar value
1670character, see
1671.Xr vidcontrol 1 .
1672Use if the default range is occupied in the language code table.
1673.It Va allscreens_flags
1674.Pq Vt str
1675If set,
1676.Xr vidcontrol 1
1677is run with these options for each of the virtual terminals
1678.Pq Pa /dev/ttyv* .
1679For example,
1680.Dq Fl m Cm on
1681will enable the mouse pointer on all virtual terminals
1682if
1683.Va moused_enable
1684is set to
1685.Dq Li YES .
1686.It Va allscreens_kbdflags
1687.Pq Vt str
1688If set,
1689.Xr kbdcontrol 1
1690is run with these options for each of the virtual terminals
1691.Pq Pa /dev/ttyv* .
1692For example,
1693.Dq Fl h Li 200
1694will set the
1695.Xr syscons 4
1696scrollback (history) buffer to 200 lines.
1697.It Va cron_enable
1698.Pq Vt bool
1699If set to
1700.Dq Li YES ,
1701run the
1702.Xr cron 8
1703daemon at system boot time.
1704.It Va cron_program
1705.Pq Vt str
1706Path to
1707.Xr cron 8
1708(default
1709.Pa /usr/sbin/cron ) .
1710.It Va cron_flags
1711.Pq Vt str
1712If
1713.Va cron_enable
1714is set to
1715.Dq Li YES ,
1716these are the flags to pass to
1717.Xr cron 8 .
1718.It Va lpd_program
1719.Pq Vt str
1720Path to
1721.Xr lpd 8
1722(default
1723.Pa /usr/sbin/lpd ) .
1724.It Va lpd_enable
1725.Pq Vt bool
1726If set to
1727.Dq Li YES ,
1728run the
1729.Xr lpd 8
1730daemon at system boot time.
1731.It Va lpd_flags
1732.Pq Vt str
1733If
1734.Va lpd_enable
1735is set to
1736.Dq Li YES ,
1737these are the flags to pass to the
1738.Xr lpd 8
1739daemon.
1740.It Va mta_start_script
1741.Pq Vt str
1742This variable specifies the full path to the script to run to start
1743a mail transfer agent.
1744The default is
1745.Pa /etc/rc.sendmail .
1746The
1747.Va sendmail_*
1748variables which
1749.Pa /etc/rc.sendmail
1750uses are documented in the
1751.Xr rc.sendmail 8
1752man page.
1753.It Va dumpdev
1754.Pq Vt str
1755Indicates the device (usually a swap partition) to which a crash dump
1756should be written in the event of a system crash.
1757The value of this variable is passed as the argument to
1758.Xr dumpon 8 .
1759To disable crash dumps, set this variable to
1760.Dq Li NO .
1761.It Va dumpdir
1762.Pq Vt str
1763When the system reboots after a crash and a crash dump is found on the
1764device specified by the
1765.Va dumpdev
1766variable,
1767.Xr savecore 8
1768will save that crash dump and a copy of the kernel to the directory
1769specified by the
1770.Va dumpdir
1771variable.
1772The default value is
1773.Pa /var/crash .
1774Set to
1775.Dq Li NO
1776to not run
1777.Xr savecore 8
1778at boot time when
1779.Va dumpdir
1780is set.
1781.It Va savecore_flags
1782.Pq Vt str
1783If crash dumps are enabled, these are the flags to pass to the
1784.Xr savecore 8
1785utility.
1786.It Va enable_quotas
1787.Pq Vt bool
1788Set to
1789.Dq Li YES
1790to turn on user disk quotas on system startup via the
1791.Xr quotaon 8
1792command.
1793.It Va check_quotas
1794.Pq Vt bool
1795Set to
1796.Dq Li YES
1797to enable user disk quota checking via the
1798.Xr quotacheck 8
1799command.
1800.It Va accounting_enable
1801.Pq Vt bool
1802Set to
1803.Dq Li YES
1804to enable system accounting through the
1805.Xr accton 8
1806facility.
1807.It Va ibcs2_enable
1808.Pq Vt bool
1809Set to
1810.Dq Li YES
1811to enable iBCS2 (SCO) binary emulation at system initial boot
1812time.
1813.It Va ibcs2_loaders
1814.Pq Vt str
1815If not set to
1816.Dq Li NO
1817and if
1818.Va ibcs2_enable
1819is set to
1820.Dq Li YES ,
1821this specifies a list of additional iBCS2 loaders to enable.
1822.It Va linux_enable
1823.Pq Vt bool
1824Set to
1825.Dq Li YES
1826to enable Linux/ELF binary emulation at system initial
1827boot time.
1828.It Va osf1_enable
1829.Pq Vt bool
1830Set to
1831.Dq Li YES
1832to enable OSF/1 (Digital UNIX) binary emulation at system
1833initial boot time.
1834(alpha)
1835.It Va clear_tmp_enable
1836.Pq Vt bool
1837Set to
1838.Dq Li YES
1839to have
1840.Pa /tmp
1841cleaned at startup.
1842.It Va ldconfig_paths
1843.Pq Vt str
1844Set to the list of shared library paths to use with
1845.Xr ldconfig 8 .
1846NOTE:
1847.Pa /usr/lib
1848will always be added first, so it need not appear in this list.
1849.It Va ldconfig_insecure
1850.Pq Vt bool
1851The
1852.Xr ldconfig 8
1853utility normally refuses to use directories
1854which are writable by anyone except root.
1855Set this variable to
1856.Dq Li YES
1857to disable that security check during system startup.
1858.It Va kern_securelevel_enable
1859.Pq Vt bool
1860Set to
1861.Dq Li YES
1862to set the kernel security level at system startup.
1863.It Va kern_securelevel
1864.Pq Vt int
1865The kernel security level to set at startup.
1866The allowed range of
1867.Ar value
1868ranges from \-1 (the compile time default) to 3 (the
1869most secure).
1870See
1871.Xr init 8
1872for the list of possible security levels and their effect
1873on system operation.
1874.It Va lomac_enable
1875.Pq Vt bool
1876Set to
1877.Dq Li YES
1878to enable Low Watermark Mandatory Access Control (LOMAC) at boot time.
1879This security model enforces integrity constraints for system processes;
1880see
1881.Xr lomac 4
1882for a complete description of the LOMAC model, as well as its impact
1883on system operation.
1884.It Va start_vinum
1885.Pq Vt bool
1886Set to
1887.Dq Li YES
1888to start
1889.Xr vinum 8
1890at system boot time.
1891.It Va sshd_program
1892.Pq Vt str
1893Path to the SSH server program
1894.Pa ( /usr/sbin/sshd
1895is the default).
1896.It Va sshd_enable
1897.Pq Vt bool
1898Set to
1899.Dq Li YES
1900to start
1901.Xr sshd 8
1902at system boot time.
1903.It Va sshd_flags
1904.Pq Vt str
1905If
1906.Va sshd_enable
1907is set to
1908.Dq Li YES ,
1909these are the flags to pass to the
1910.Xr sshd 8
1911daemon.
1912.It Va unaligned_print
1913.Pq Vt bool
1914If set to
1915.Dq Li NO ,
1916unaligned access warnings will not be printed.
1917(alpha)
1918.\" ----- isdn settings ---------------------------------
1919.It Va isdn_enable
1920.Pq Vt bool
1921Set to
1922.Dq Li NO
1923by default.
1924When set to
1925.Dq Li YES ,
1926starts the
1927.Xr isdnd 8
1928daemon
1929at system boot time.
1930.It Va isdn_flags
1931.Pq Vt str
1932Set to
1933.Dq Fl d Ns Cm n Fl d Ns Li 0x1f9
1934by default.
1935Additional flags to pass to
1936.Xr isdnd 8
1937(but see
1938.Va isdn_fsdev
1939and
1940.Va isdn_ttype
1941for certain tunable parameters).
1942.It Va isdn_ttype
1943.Pq Vt str
1944Set to
1945.Dq Li cons25
1946by default.
1947The terminal type of the output device when
1948.Xr isdnd 8
1949operates in full-screen mode.
1950.It Va isdn_screenflags
1951.Pq Vt str
1952Set to
1953.Dq Li NO
1954by default.
1955The video mode for full-screen mode (only for
1956.Xr syscons 4
1957console driver, see
1958.Xr vidcontrol 1
1959for valid modes).
1960.It Va isdn_fsdev
1961.Pq Vt str
1962Set to
1963.Dq Li NO
1964by default.
1965The output device for
1966.Xr isdnd 8
1967in full-screen mode (or
1968.Dq Li NO
1969for daemon mode).
1970.It Va isdn_trace
1971.Pq Vt bool
1972Set to
1973.Dq Li NO
1974by default.
1975When set to
1976.Dq Li YES ,
1977enables the ISDN protocol trace utility
1978.Xr isdntrace 8
1979at system boot time.
1980.It Va isdn_traceflags
1981.Pq Vt str
1982Set to
1983.Dq Fl f Pa /var/tmp/isdntrace0
1984by default.
1985Flags for
1986.Xr isdntrace 8 .
1987.\" -----------------------------------------------------
1988.It Va pcvt_verbose
1989.Pq Vt bool
1990Set to
1991.Dq Li NO
1992by default.
1993When set to
1994.Dq Li YES ,
1995verbose messages about the actions done by the start script are displayed.
1996.Em Note :
1997the
1998.Xr pcvt 4
1999driver must be compiled into the kernel before the
2000.Xr pcvt 4
2001related
2002options described here take any effect.
2003.It Va pcvt_keymap
2004.Pq Vt str
2005Set to
2006.Dq Li NO
2007by default.
2008Use this to configure a national keyboard mapping found in the
2009.Pa /usr/share/misc/keycap.pcvt
2010file of keyboard mappings.
2011(See also the manual pages
2012.Xr keycap 5
2013and
2014.Xr keycap 3
2015for usage of
2016.Xr pcvt 4 Ns 's
2017keycap database and the manual page
2018.Xr kcon 1
2019option
2020.Fl m
2021for national keyboard mapping configuration.)
2022.It Va pcvt_keydel
2023.Pq Vt int
2024Set to
2025.Dq Li NO
2026by default.
2027Used to set the keyboard key repeat delay value.
2028Valid values are
2029in the range 0..3 for delay values of 250, 500, 750 and 1000 msec.
2030(See also the
2031.Xr kcon 1
2032manual page.)
2033.It Va pcvt_keyrate
2034.Pq Vt int
2035Set to
2036.Dq Li NO
2037by default.
2038Used to set the keyboard key repetition rate value.
2039Valid values are
2040in the range 0..31 for repetition values of 2..30 characters per second.
2041.It Va pcvt_keyrepeat
2042.Pq Vt bool
2043Set to
2044.Dq Li NO
2045by default.
2046Set to
2047.Dq Li YES
2048to enable automatic keyboard key repeating.
2049.It Va pcvt_force24
2050.Pq Vt bool
2051Set to
2052.Dq Li NO
2053by default.
2054Set to
2055.Dq Li YES
2056to force
2057.Xr pcvt 4
2058to use 24 lines only (in 25 lines mode) for compatibility
2059with the original
2060.Tn VT220
2061terminal.
2062.It Va pcvt_hpext
2063.Pq Vt bool
2064Set to
2065.Dq Li NO
2066by default.
2067Set to
2068.Dq Li YES
2069to enable the display and funtionality of function key labels (as found
2070on
2071.Tn Hewlett-Packard
2072terminals such as the
2073.Tn HP2392A
2074and the
2075.Tn HP700/92
2076in
2077.Tn ANSI
2078mode).
2079.It Va pcvt_lines
2080.Pq Vt int
2081Set to
2082.Dq Li NO
2083by default resulting in a value of 25.
2084Used to set the number of lines on the screen.
2085For VGA displays, valid
2086values are 25, 28, 40 and 50 lines.
2087(See also the
2088.Xr scon 1
2089manual page.)
2090.It Va pcvt_blanktime
2091.Pq Vt int
2092Set to
2093.Dq Li NO
2094by default.
2095Used to set the screen saver timeout in seconds for values greater than
2096zero.
2097.It Va pcvt_cursorh
2098.Pq Vt int
2099Set to
2100.Dq Li NO
2101by default.
2102Used to set the cursor top scanline.
2103(See also the
2104.Xr cursor 1
2105manual page.)
2106.It Va pcvt_cursorl
2107.Pq Vt int
2108Set to
2109.Dq Li NO
2110by default.
2111Used to set the cursor bottom scanline.
2112.It Va pcvt_monohigh
2113.Pq Vt bool
2114Set to
2115.Dq Li NO
2116by default.
2117Set to
2118.Dq Li YES
2119to set intensity to high on monochrome monitors.
2120(See also the
2121.Xr scon 1
2122manual page, option
2123.Fl p ,
2124for more information on changing VGA palette
2125values.)
2126.El
2127.Sh FILES
2128.Bl -tag -width ".Pa /etc/defaults/rc.conf" -compact
2129.It Pa /etc/defaults/rc.conf
2130.It Pa /etc/rc.conf
2131.It Pa /etc/rc.conf.local
2132.El
2133.Sh SEE ALSO
2134.Xr catman 1 ,
2135.Xr gdb 1 ,
2136.Xr info 1 ,
2137.Xr makewhatis 1 ,
2138.Xr vidcontrol 1 ,
2139.Xr tcp 4 ,
2140.Xr udp 4 ,
2141.Xr exports 5 ,
2142.Xr motd 5 ,
2143.Xr accton 8 ,
2144.Xr amd 8 ,
2145.Xr apm 8 ,
2146.Xr atm 8 ,
2147.Xr cron 8 ,
2148.Xr dhclient 8 ,
2149.Xr gated 8 ,
2150.Xr ifconfig 8 ,
2151.Xr inetd 8 ,
2152.Xr isdnd 8 ,
2153.Xr isdntrace 8 ,
2154.Xr lpd 8 ,
2155.Xr mdconfig 8 ,
2156.Xr moused 8 ,
2157.Xr mrouted 8 ,
2158.Xr named 8 ,
2159.Xr nfsd 8 ,
2160.Xr ntpd 8 ,
2161.Xr ntpdate 8 ,
2162.Xr pcnfsd 8 ,
2163.Xr quotacheck 8 ,
2164.Xr quotaon 8 ,
2165.Xr rc 8 ,
2166.Xr rc.sendmail 8 ,
2167.Xr route 8 ,
2168.Xr routed 8 ,
2169.Xr rpc.lockd 8 ,
2170.Xr rpc.statd 8 ,
2171.Xr rpcbind 8 ,
2172.Xr rwhod 8 ,
2173.Xr savecore 8 ,
2174.Xr sshd 8 ,
2175.Xr swapon 8 ,
2176.Xr sysctl 8 ,
2177.Xr syslogd 8 ,
2178.Xr timed 8 ,
2179.Xr vinum 8 ,
2180.Xr xtend 8 ,
2181.Xr yp 8 ,
2182.Xr ypbind 8 ,
2183.Xr ypserv 8 ,
2184.Xr ypset 8
2185.Sh HISTORY
2186The
2187.Nm
2188file appeared in
2189.Fx 2.2.2 .
2190.Sh AUTHORS
2191.An Jordan K. Hubbard .
| 742.It Va extra_netfs_types
743.Pq Vt str
744If set to something other than
745.Dq Li NO
746(the default),
747this variable extends the list of file system types
748for which automatic mounting at startup by
749.Xr rc 8
750should be delayed until the network is initialized.
751It should contain
752a whitespace-separated list of network file system descriptor pairs,
753each consisting of a file system type as passed to
754.Xr mount 8
755and a human-readable, one-word description,
756joined with a colon
757.Pq Ql \&: .
758Extending the default list in this way is only necessary
759when third party file system types are used.
760.It Va syslogd_enable
761.Pq Vt bool
762If set to
763.Dq Li YES ,
764run the
765.Xr syslogd 8
766daemon.
767.It Va syslogd_program
768.Pq Vt str
769Path to
770.Xr syslogd 8
771(default
772.Pa /usr/sbin/syslogd ) .
773.It Va syslogd_flags
774.Pq Vt str
775If
776.Va syslogd_enable
777is set to
778.Dq Li YES ,
779these are the flags to pass to
780.Xr syslogd 8 .
781.It Va inetd_enable
782.Pq Vt bool
783If set to
784.Dq Li YES ,
785run the
786.Xr inetd 8
787daemon.
788.It Va inetd_program
789.Pq Vt str
790Path to
791.Xr inetd 8
792(default
793.Pa /usr/sbin/inetd ) .
794.It Va inetd_flags
795.Pq Vt str
796If
797.Va inetd_enable
798is set to
799.Dq Li YES ,
800these are the flags to pass to
801.Xr inetd 8 .
802.It Va named_enable
803.Pq Vt bool
804If set to
805.Dq Li YES ,
806run the
807.Xr named 8
808daemon.
809.It Va named_program
810.Pq Vt str
811Path to
812.Xr named 8
813(default
814.Pa /usr/sbin/named ) .
815.It Va named_flags
816.Pq Vt str
817If
818.Va named_enable
819is set to
820.Dq Li YES ,
821these are the flags to pass to
822.Xr named 8 .
823.It Va kerberos4_server_enable
824.Pq Vt bool
825Set to
826.Dq Li YES
827to start a Kerberos IV authentication server
828at boot time.
829.It Va kadmind4_server_enable
830.Pq Vt bool
831Set to
832.Dq Li YES
833to start
834.Xr kadmind 8 ,
835the Kerberos IV Administration Daemon; set to
836.Dq Li NO
837on a slave server.
838.It Va kerberos_stash
839.Pq Vt str
840If
841.Dq Li YES ,
842instruct the Kerberos servers to use the stashed master key instead of
843prompting for it (only if
844.Va kerberos_server_enable
845is set to
846.Dq Li YES ,
847and is used for both
848.Xr kerberos 1
849and
850.Xr kadmind 8 ) .
851.It Va kerberos5_server_enable
852.Pq Vt bool
853Set to
854.Dq Li YES
855to start a Kerberos 5 authentication server
856at boot time.
857.It Va kadmind5_server_enable
858.Pq Vt bool
859Set to
860.Dq Li YES
861to start
862.Xr k5admind 8 ,
863the Kerberos 5 Administration Daemon; set to
864.Dq Li NO
865on a slave server.
866.It Va rwhod_enable
867.Pq Vt bool
868If set to
869.Dq Li YES ,
870run the
871.Xr rwhod 8
872daemon at boot time.
873.It Va rwhod_flags
874.Pq Vt str
875If
876.Va rwhod_enable
877is set to
878.Dq Li YES ,
879these are the flags to pass to it.
880.It Va amd_enable
881.Pq Vt bool
882If set to
883.Dq Li YES ,
884run the
885.Xr amd 8
886daemon at boot time.
887.It Va amd_flags
888.Pq Vt str
889If
890.Va amd_enable
891is set to
892.Dq Li YES ,
893these are the flags to pass to it.
894See the
895.Xr amd 8
896manpage for more information.
897.It Va amd_map_program
898.Pq Vt str
899If set,
900the specified program is run to get the list of
901.Xr amd 8
902maps.
903For example, if the
904.Xr amd 8
905maps are stored in NIS, one can set this to
906run
907.Xr ypcat 1
908to get a list of
909.Xr amd 8
910maps from the
911.Pa amd.master
912NIS map.
913.It Va update_motd
914.Pq Vt bool
915If set to
916.Dq Li YES ,
917.Pa /etc/motd
918will be updated at boot time to reflect the kernel release
919being run.
920If set to
921.Dq Li NO ,
922.Pa /etc/motd
923will not be updated.
924.It Va nfs_client_enable
925.Pq Vt bool
926If set to
927.Dq Li YES ,
928run the NFS client daemons at boot time.
929.It Va nfs_access_cache
930.Pq Vt int
931If
932.Va nfs_client_enable
933is set to
934.Dq Li YES ,
935this can be set to
936.Dq Li 0
937to disable NFS ACCESS RPC caching, or to the number of seconds for which
938NFS ACCESS
939results should be cached.
940A value of 2-10 seconds will substantially reduce network
941traffic for many NFS operations.
942.It Va nfs_server_enable
943.Pq Vt bool
944If set to
945.Dq Li YES ,
946run the NFS server daemons at boot time.
947.It Va nfs_server_flags
948.Pq Vt str
949If
950.Va nfs_server_enable
951is set to
952.Dq Li YES ,
953these are the flags to pass to the
954.Xr nfsd 8
955daemon.
956.It Va mountd_enable
957.Pq Vt bool
958If set to
959.Dq Li YES ,
960and no
961.Va nfs_server_enable
962is set, start
963.Xr mountd 8 ,
964but not
965.Xr nfsd 8
966daemon.
967It is commonly needed to run CFS without real NFS used.
968.It Va weak_mountd_authentication
969.Pq Vt bool
970If set to
971.Dq Li YES ,
972allow services like PCNFSD to make non-privileged mount
973requests.
974.It Va nfs_privport
975.Pq Vt bool
976If set to
977.Dq Li YES ,
978provide NFS services only on a secure port.
979.It Va nfs_bufpackets
980.Pq Vt int
981If set to a number, indicates the number of packets worth of
982socket buffer space to reserve on an NFS client.
983If set to
984.Dq Li DEFAULT ,
985the kernel default is used (typically 4).
986Using a higher number may be
987useful on gigabit networks to improve performance.
988The minimum value is
9892 and the maximum is 64.
990.It Va rpc_lockd_enable
991.Pq Vt bool
992If set to
993.Dq Li YES
994and also an NFS server, run
995.Xr rpc.lockd 8
996at boot time.
997.It Va rpc_statd_enable
998.Pq Vt bool
999If set to
1000.Dq Li YES
1001and also an NFS server, run
1002.Xr rpc.statd 8
1003at boot time.
1004.It Va rpcbind_program
1005.Pq Vt str
1006Path to
1007.Xr rpcbind 8
1008(default
1009.Pa /usr/sbin/rpcbind ) .
1010.It Va rpcbind_enable
1011.Pq Vt bool
1012If set to
1013.Dq Li YES ,
1014run the
1015.Xr rpcbind 8
1016service at boot time.
1017.It Va rpcbind_flags
1018.Pq Vt str
1019If
1020.Va rpcbind_enable
1021is set to
1022.Dq Li YES ,
1023these are the flags to pass to the
1024.Xr rpcbind 8
1025daemon.
1026.It Va xtend_enable
1027.Pq Vt bool
1028If set to
1029.Dq Li YES ,
1030run the
1031.Xr xtend 8
1032daemon at boot time.
1033.It Va xtend_flags
1034.Pq Vt str
1035If
1036.Va xtend_enable
1037is set to
1038.Dq Li YES ,
1039these are the flags to pass to the
1040.Xr xtend 8
1041daemon.
1042.It Va pppoed_enable
1043.Pq Vt bool
1044If set to
1045.Dq Li YES ,
1046run the
1047.Xr pppoed 8
1048daemon at boot time to provide PPP over Ethernet services.
1049.It Va pppoed_ Ns Ar provider
1050.Pq Vt str
1051.Xr pppoed 8
1052listens to requests to this
1053.Ar provider
1054and ultimately runs
1055.Xr ppp 8
1056with a
1057.Ar system
1058argument of the same name.
1059.It Va pppoed_flags
1060.Pq Vt str
1061Additional flags to pass to
1062.Xr pppoed 8 .
1063.It Va pppoed_interface
1064.Pq Vt str
1065The network interface to run
1066.Xr pppoed 8
1067on.
1068This is mandatory when
1069.Va pppoed_enable
1070is set to
1071.Dq Li YES .
1072.It Va timed_enable
1073.Pq Vt boot
1074If set to
1075.Dq Li YES ,
1076run the
1077.Xr timed 8
1078service at boot time.
1079This command is intended for networks of
1080machines where a consistent
1081.Dq "network time"
1082for all hosts must be established.
1083This is often useful in large NFS
1084environments where time stamps on files are expected to be consistent
1085network-wide.
1086.It Va timed_flags
1087.Pq Vt str
1088If
1089.Va timed_enable
1090is set to
1091.Dq Li YES ,
1092these are the flags to pass to the
1093.Xr timed 8
1094service.
1095.It Va ntpdate_enable
1096.Pq Vt bool
1097If set to
1098.Dq Li YES ,
1099run
1100.Xr ntpdate 8
1101at system startup.
1102This command is intended to
1103synchronize the system clock only
1104.Em once
1105from some standard reference.
1106An option to set this up initially
1107(from a list of known servers) is also provided by the
1108.Xr sysinstall 8
1109program when the system is first installed.
1110.It Va ntpdate_program
1111.Pq Vt str
1112Path to
1113.Xr ntpdate 8
1114(default
1115.Pa /usr/sbin/ntpdate ) .
1116.It Va ntpdate_flags
1117.Pq Vt str
1118If
1119.Va ntpdate_enable
1120is set to
1121.Dq Li YES ,
1122these are the flags to pass to the
1123.Xr ntpdate 8
1124command (typically a hostname).
1125.It Va ntpd_enable
1126.Pq Vt bool
1127If set to
1128.Dq Li YES ,
1129run the
1130.Xr ntpd 8
1131command at boot time.
1132.It Va ntpd_program
1133.Pq Vt str
1134Path to
1135.Xr ntpd 8
1136(default
1137.Pa /usr/sbin/ntpd ) .
1138.It Va ntpd_flags
1139.Pq Vt str
1140If
1141.Va ntpd_enable
1142is set to
1143.Dq Li YES ,
1144these are the flags to pass to the
1145.Xr ntpd 8
1146daemon.
1147.It Va nis_client_enable
1148.Pq Vt bool
1149If set to
1150.Dq Li YES ,
1151run the
1152.Xr ypbind 8
1153service at system boot time.
1154.It Va nis_client_flags
1155.Pq Vt str
1156If
1157.Va nis_client_enable
1158is set to
1159.Dq Li YES ,
1160these are the flags to pass to the
1161.Xr ypbind 8
1162service.
1163.It Va nis_ypset_enable
1164.Pq Vt bool
1165If set to
1166.Dq Li YES ,
1167run the
1168.Xr ypset 8
1169daemon at system boot time.
1170.It Va nis_ypset_flags
1171.Pq Vt str
1172If
1173.Va nis_ypset_enable
1174is set to
1175.Dq Li YES ,
1176these are the flags to pass to the
1177.Xr ypset 8
1178daemon.
1179.It Va nis_server_enable
1180.Pq Vt bool
1181If set to
1182.Dq Li YES ,
1183run the
1184.Xr ypserv 8
1185daemon at system boot time.
1186.It Va nis_server_flags
1187.Pq Vt str
1188If
1189.Va nis_server_enable
1190is set to
1191.Dq Li YES ,
1192these are the flags to pass to the
1193.Xr ypserv 8
1194daemon.
1195.It Va nis_ypxfrd_enable
1196.Pq Vt bool
1197If set to
1198.Dq Li YES ,
1199run the
1200.Xr rpc.ypxfrd 8
1201daemon at system boot time.
1202.It Va nis_ypxfrd_flags
1203.Pq Vt str
1204If
1205.Va nis_ypxfrd_enable
1206is set to
1207.Dq Li YES ,
1208these are the flags to pass to the
1209.Xr rpc.ypxfrd 8
1210daemon.
1211.It Va nis_yppasswdd_enable
1212.Pq Vt bool
1213If set to
1214.Dq Li YES ,
1215run the
1216.Xr rpc.yppasswdd 8
1217daemon at system boot time.
1218.It Va nis_yppasswdd_flags
1219.Pq Vt str
1220If
1221.Va nis_yppasswdd_enable
1222is set to
1223.Dq Li YES ,
1224these are the flags to pass to the
1225.Xr rpc.yppasswdd 8
1226daemon.
1227.It Va defaultrouter
1228.Pq Vt str
1229If not set to
1230.Dq Li NO ,
1231create a default route to this host name or IP address
1232(use an IP address if this router is also required to get to the
1233name server!).
1234.It Va static_routes
1235.Pq Vt str
1236Set to the list of static routes that are to be added at system
1237boot time.
1238If not set to
1239.Dq Li NO
1240then for each whitespace separated
1241.Ar element
1242in the value, a
1243.Va route_ Ns Aq Ar element
1244variable is assumed to exist
1245whose contents will later be passed to a
1246.Dq Nm route Cm add
1247operation.
1248.It Va gateway_enable
1249.Pq Vt bool
1250If set to
1251.Dq Li YES ,
1252configure host to act as an IP router, e.g. to forward packets
1253between interfaces.
1254.It Va router_enable
1255.Pq Vt bool
1256If set to
1257.Dq Li YES ,
1258run a routing daemon of some sort, based on the
1259settings of
1260.Va router
1261and
1262.Va router_flags .
1263.It Va router
1264.Pq Vt str
1265If
1266.Va router_enable
1267is set to
1268.Dq Li YES ,
1269this is the name of the routing daemon to use.
1270.It Va router_flags
1271.Pq Vt str
1272If
1273.Va router_enable
1274is set to
1275.Dq Li YES ,
1276these are the flags to pass to the routing daemon.
1277.It Va mrouted_enable
1278.Pq Vt bool
1279If set to
1280.Dq Li YES ,
1281run the multicast routing daemon,
1282.Xr mrouted 8 .
1283.It Va mrouted_flags
1284.Pq Vt str
1285If
1286.Va mrouted_enable
1287is set to
1288.Dq Li YES ,
1289these are the flags to pass to the
1290.Xr mrouted 8
1291daemon.
1292.It Va ipxgateway_enable
1293.Pq Vt bool
1294If set to
1295.Dq Li YES ,
1296enable the routing of IPX traffic.
1297.It Va ipxrouted_enable
1298.Pq Vt bool
1299If set to
1300.Dq Li YES ,
1301run the
1302.Xr IPXrouted 8
1303daemon at system boot time.
1304.It Va ipxrouted_flags
1305.Pq Vt str
1306If
1307.Va ipxrouted_enable
1308is set to
1309.Dq Li YES ,
1310these are the flags to pass to the
1311.Xr IPXrouted 8
1312daemon.
1313.It Va arpproxy_all
1314.Pq Vt bool
1315If set to
1316.Dq Li YES ,
1317enable global proxy ARP.
1318.It Va forward_sourceroute
1319.Pq Vt bool
1320If set to
1321.Dq Li YES
1322and
1323.Va gateway_enable
1324is also set to
1325.Dq Li YES ,
1326source-routed packets are forwarded.
1327.It Va accept_sourceroute
1328.Pq Vt bool
1329If set to
1330.Dq Li YES ,
1331the system will accept source-routed packets directed at it.
1332.It Va rarpd_enable
1333.Pq Vt bool
1334If set to
1335.Dq Li YES ,
1336run the
1337.Xr rarpd 8
1338daemon at system boot time.
1339.It Va rarpd_flags
1340.Pq Vt str
1341If
1342.Va rarpd_enable
1343is set to
1344.Dq Li YES ,
1345these are the flags to pass to the
1346.Xr rarpd 8
1347daemon.
1348.It Va bootparamd_enable
1349.Pq Vt bool
1350If set to
1351.Dq Li YES ,
1352run the
1353.Xr bootparamd 8
1354daemon at system boot time.
1355.It Va bootparamd_flags
1356.Pq Vt str
1357If
1358.Va bootparamd_enable
1359is set to
1360.Dq Li YES ,
1361these are the flags to pass to the
1362.Xr bootparamd 8
1363daemon.
1364.It Va atm_enable
1365.Pq Vt bool
1366Set to
1367.Dq Li YES
1368to enable the configuration of ATM interfaces at system boot time.
1369For all of the ATM variables described below, please refer to the
1370.Xr atm 8
1371man page for further details on the available command parameters.
1372Also refer to the files in
1373.Pa /usr/share/examples/atm
1374for more detailed configuration information.
1375.It Va atm_netif_ Ns Aq Ar intf
1376.Pq Vt str
1377For the ATM physical interface
1378.Ar intf ,
1379this variable defines the name prefix and count for the ATM network
1380interfaces to be created.
1381The value will be passed as the parameters of an
1382.Dq Nm atm Cm "set netif" Ar intf
1383command.
1384.It Va atm_sigmgr_ Ns Aq Ar intf
1385.Pq Vt str
1386For the ATM physical interface
1387.Ar intf ,
1388this variable defines the ATM signalling manager to be used.
1389The value will be passed as the parameters of an
1390.Dq Nm atm Cm attach Ar intf
1391command.
1392.It Va atm_prefix_ Ns Aq Ar intf
1393.Pq Vt str
1394For the ATM physical interface
1395.Ar intf ,
1396this variable defines the NSAP prefix for interfaces using a UNI signalling
1397manager.
1398If set to
1399.Dq Li ILMI ,
1400the prefix will automatically be set via the
1401.Xr ilmid 8
1402daemon.
1403Otherwise, the value will be passed as the parameters of an
1404.Dq Nm atm Cm "set prefix" Ar intf
1405command.
1406.It Va atm_macaddr_ Ns Aq Ar intf
1407.Pq Vt str
1408For the ATM physical interface
1409.Ar intf ,
1410this variable defines the MAC address for interfaces using a UNI signalling
1411manager.
1412If set to
1413.Dq Li NO ,
1414the hardware MAC address contained in the ATM interface card will be used.
1415Otherwise, the value will be passed as the parameters of an
1416.Dq Nm atm Cm "set mac" Ar intf
1417command.
1418.It Va atm_arpserver_ Ns Aq Ar netif
1419.Pq Vt str
1420For the ATM network interface
1421.Ar netif ,
1422this variable defines the ATM address for a host which is to provide ATMARP
1423service.
1424This variable is only applicable to interfaces using a UNI signalling
1425manager.
1426If set to
1427.Dq Li local ,
1428this host will become an ATMARP server.
1429The value will be passed as the parameters of an
1430.Dq Nm atm Cm "set arpserver" Ar netif
1431command.
1432.It Va atm_scsparp_ Ns Aq Ar netif
1433.Pq Vt bool
1434If set to
1435.Dq Li YES ,
1436SCSP/ATMARP service for the network interface
1437.Ar netif
1438will be initiated using the
1439.Xr scspd 8
1440and
1441.Xr atmarpd 8
1442daemons.
1443This variable is only applicable if
1444.Va atm_arpserver_ Ns Aq Ar netif
1445is set to
1446.Dq Li local .
1447.It Va atm_pvcs
1448.Pq Vt str
1449Set to the list of ATM PVCs to be added at system
1450boot time.
1451For each whitespace separated
1452.Ar element
1453in the value, an
1454.Va atm_pvc_ Ns Aq Ar element
1455variable is assumed to exist.
1456The value of each of these variables
1457will be passed as the parameters of an
1458.Dq Nm atm Cm "add pvc"
1459command.
1460.It Va atm_arps
1461.Pq Vt str
1462Set to the list of permanent ATM ARP entries to be added
1463at system boot time.
1464For each whitespace separated
1465.Ar element
1466in the value, an
1467.Va atm_arp_ Ns Aq Ar element
1468variable is assumed to exist.
1469The value of each of these variables
1470will be passed as the parameters of an
1471.Dq Nm atm Cm "add arp"
1472command.
1473.It Va keymap
1474.Pq Vt str
1475If set to
1476.Dq Li NO ,
1477no keymap is installed, otherwise the value is used to install
1478the keymap file in
1479.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd .
1480.It Va keyrate
1481.Pq Vt str
1482The keyboard repeat speed.
1483Set to
1484.Dq Li slow ,
1485.Dq Li normal ,
1486.Dq Li fast ,
1487or
1488.Dq Li NO
1489if the default behavior is desired.
1490.It Va keychange
1491.Pq Vt str
1492If not set to
1493.Dq Li NO ,
1494attempt to program the function keys with the value.
1495The value should
1496be a single string of the form:
1497.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... .
1498.It Va cursor
1499.Pq Vt str
1500Can be set to the value of
1501.Dq Li normal ,
1502.Dq Li blink ,
1503.Dq Li destructive ,
1504or
1505.Dq Li NO
1506to set the cursor behavior explicitly or choose the default behavior.
1507.It Va scrnmap
1508.Pq Vt str
1509If set to
1510.Dq Li NO ,
1511no screen map is installed, otherwise the value is used to install
1512the screen map file in
1513.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value .
1514.It Va font8x16
1515.Pq Vt str
1516If set to
1517.Dq Li NO ,
1518the default 8x16 font value is used for screen size requests, otherwise
1519the value in
1520.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1521is used.
1522.It Va font8x14
1523.Pq Vt str
1524If set to
1525.Dq Li NO ,
1526the default 8x14 font value is used for screen size requests, otherwise
1527the value in
1528.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1529is used.
1530.It Va font8x8
1531.Pq Vt str
1532If set to
1533.Dq Li NO ,
1534the default 8x8 font value is used for screen size requests, otherwise
1535the value in
1536.Pa /usr/share/syscons/fonts/ Ns Aq Ar value
1537is used.
1538.It Va blanktime
1539.Pq Vt int
1540If set to
1541.Dq Li NO ,
1542the default screen blanking interval is used, otherwise it is set
1543to
1544.Ar value
1545seconds.
1546.It Va saver
1547.Pq Vt str
1548If not set to
1549.Dq Li NO ,
1550this is the actual screen saver to use
1551.Li ( blank , snake , daemon ,
1552etc).
1553.It Va moused_enable
1554.Pq Vt str
1555If set to
1556.Dq Li YES ,
1557the
1558.Xr moused 8
1559daemon is started for doing cut/paste selection on the console.
1560.It Va moused_type
1561.Pq Vt str
1562This is the protocol type of the mouse connected to this host.
1563This variable must be set if
1564.Va moused_enable
1565is set to
1566.Dq Li YES .
1567The
1568.Xr moused 8
1569daemon
1570is able to detect the appropriate mouse type automatically in many cases.
1571Set this variable to
1572.Dq Li auto
1573to let the daemon detect it, or
1574select one from the following list if the automatic detection fails.
1575.Pp
1576If the mouse is attached to the PS/2 mouse port, choose
1577.Dq Li auto
1578or
1579.Dq Li ps/2 ,
1580regardless of the brand and model of the mouse.
1581Likewise, if the
1582mouse is attached to the bus mouse port, choose
1583.Dq Li auto
1584or
1585.Dq Li busmouse .
1586All other protocols are for serial mice and will not work with
1587the PS/2 and bus mice.
1588If this is a USB mouse,
1589.Dq Li auto
1590is the only protocol type which will work.
1591.Pp
1592.Bl -tag -width ".Li x10mouseremote" -compact
1593.It Li microsoft
1594Microsoft mouse (serial)
1595.It Li intellimouse
1596Microsoft IntelliMouse (serial)
1597.It Li mousesystems
1598Mouse systems Corp. mouse (serial)
1599.It Li mmseries
1600MM Series mouse (serial)
1601.It Li logitech
1602Logitech mouse (serial)
1603.It Li busmouse
1604A bus mouse
1605.It Li mouseman
1606Logitech MouseMan and TrackMan (serial)
1607.It Li glidepoint
1608ALPS GlidePoint (serial)
1609.It Li thinkingmouse
1610Kensington ThinkingMouse (serial)
1611.It Li ps/2
1612PS/2 mouse
1613.It Li mmhittab
1614MM HitTablet (serial)
1615.It Li x10mouseremote
1616X10 MouseRemote (serial)
1617.It Li versapad
1618Interlink VersaPad (serial)
1619.El
1620.Pp
1621Even if the mouse is not in the above list, it may be compatible
1622with one in the list.
1623Refer to the man page for
1624.Xr moused 8
1625for compatibility information.
1626.Pp
1627It should also be noted that while this is enabled, any
1628other client of the mouse (such as an X server) should access
1629the mouse through the virtual mouse device,
1630.Pa /dev/sysmouse ,
1631and configure it as a
1632.Dq Li sysmouse
1633type mouse, since all
1634mouse data is converted to this single canonical format when
1635using
1636.Xr moused 8 .
1637If the client program does not support the
1638.Dq Li sysmouse
1639type,
1640specify the
1641.Dq Li mousesystems
1642type.
1643It is the second preferred type.
1644.It Va moused_port
1645.Pq Vt str
1646If
1647.Va moused_enable
1648is set to
1649.Dq Li YES ,
1650this is the actual port the mouse is on.
1651It might be
1652.Pa /dev/cuaa0
1653for a COM1 serial mouse,
1654.Pa /dev/psm0
1655for a PS/2 mouse or
1656.Pa /dev/mse0
1657for a bus mouse, for example.
1658.It Va moused_flags
1659.Pq Vt str
1660If
1661.Va moused_type
1662is set, these are the additional flags to pass to the
1663.Xr moused 8
1664daemon.
1665.It Va mousechar_start
1666.Pq Vt int
1667If set to
1668.Dq Li NO ,
1669the default mouse cursor character range
1670.Li 0xd0 Ns - Ns Li 0xd3
1671is used,
1672otherwise the range start is set
1673to
1674.Ar value
1675character, see
1676.Xr vidcontrol 1 .
1677Use if the default range is occupied in the language code table.
1678.It Va allscreens_flags
1679.Pq Vt str
1680If set,
1681.Xr vidcontrol 1
1682is run with these options for each of the virtual terminals
1683.Pq Pa /dev/ttyv* .
1684For example,
1685.Dq Fl m Cm on
1686will enable the mouse pointer on all virtual terminals
1687if
1688.Va moused_enable
1689is set to
1690.Dq Li YES .
1691.It Va allscreens_kbdflags
1692.Pq Vt str
1693If set,
1694.Xr kbdcontrol 1
1695is run with these options for each of the virtual terminals
1696.Pq Pa /dev/ttyv* .
1697For example,
1698.Dq Fl h Li 200
1699will set the
1700.Xr syscons 4
1701scrollback (history) buffer to 200 lines.
1702.It Va cron_enable
1703.Pq Vt bool
1704If set to
1705.Dq Li YES ,
1706run the
1707.Xr cron 8
1708daemon at system boot time.
1709.It Va cron_program
1710.Pq Vt str
1711Path to
1712.Xr cron 8
1713(default
1714.Pa /usr/sbin/cron ) .
1715.It Va cron_flags
1716.Pq Vt str
1717If
1718.Va cron_enable
1719is set to
1720.Dq Li YES ,
1721these are the flags to pass to
1722.Xr cron 8 .
1723.It Va lpd_program
1724.Pq Vt str
1725Path to
1726.Xr lpd 8
1727(default
1728.Pa /usr/sbin/lpd ) .
1729.It Va lpd_enable
1730.Pq Vt bool
1731If set to
1732.Dq Li YES ,
1733run the
1734.Xr lpd 8
1735daemon at system boot time.
1736.It Va lpd_flags
1737.Pq Vt str
1738If
1739.Va lpd_enable
1740is set to
1741.Dq Li YES ,
1742these are the flags to pass to the
1743.Xr lpd 8
1744daemon.
1745.It Va mta_start_script
1746.Pq Vt str
1747This variable specifies the full path to the script to run to start
1748a mail transfer agent.
1749The default is
1750.Pa /etc/rc.sendmail .
1751The
1752.Va sendmail_*
1753variables which
1754.Pa /etc/rc.sendmail
1755uses are documented in the
1756.Xr rc.sendmail 8
1757man page.
1758.It Va dumpdev
1759.Pq Vt str
1760Indicates the device (usually a swap partition) to which a crash dump
1761should be written in the event of a system crash.
1762The value of this variable is passed as the argument to
1763.Xr dumpon 8 .
1764To disable crash dumps, set this variable to
1765.Dq Li NO .
1766.It Va dumpdir
1767.Pq Vt str
1768When the system reboots after a crash and a crash dump is found on the
1769device specified by the
1770.Va dumpdev
1771variable,
1772.Xr savecore 8
1773will save that crash dump and a copy of the kernel to the directory
1774specified by the
1775.Va dumpdir
1776variable.
1777The default value is
1778.Pa /var/crash .
1779Set to
1780.Dq Li NO
1781to not run
1782.Xr savecore 8
1783at boot time when
1784.Va dumpdir
1785is set.
1786.It Va savecore_flags
1787.Pq Vt str
1788If crash dumps are enabled, these are the flags to pass to the
1789.Xr savecore 8
1790utility.
1791.It Va enable_quotas
1792.Pq Vt bool
1793Set to
1794.Dq Li YES
1795to turn on user disk quotas on system startup via the
1796.Xr quotaon 8
1797command.
1798.It Va check_quotas
1799.Pq Vt bool
1800Set to
1801.Dq Li YES
1802to enable user disk quota checking via the
1803.Xr quotacheck 8
1804command.
1805.It Va accounting_enable
1806.Pq Vt bool
1807Set to
1808.Dq Li YES
1809to enable system accounting through the
1810.Xr accton 8
1811facility.
1812.It Va ibcs2_enable
1813.Pq Vt bool
1814Set to
1815.Dq Li YES
1816to enable iBCS2 (SCO) binary emulation at system initial boot
1817time.
1818.It Va ibcs2_loaders
1819.Pq Vt str
1820If not set to
1821.Dq Li NO
1822and if
1823.Va ibcs2_enable
1824is set to
1825.Dq Li YES ,
1826this specifies a list of additional iBCS2 loaders to enable.
1827.It Va linux_enable
1828.Pq Vt bool
1829Set to
1830.Dq Li YES
1831to enable Linux/ELF binary emulation at system initial
1832boot time.
1833.It Va osf1_enable
1834.Pq Vt bool
1835Set to
1836.Dq Li YES
1837to enable OSF/1 (Digital UNIX) binary emulation at system
1838initial boot time.
1839(alpha)
1840.It Va clear_tmp_enable
1841.Pq Vt bool
1842Set to
1843.Dq Li YES
1844to have
1845.Pa /tmp
1846cleaned at startup.
1847.It Va ldconfig_paths
1848.Pq Vt str
1849Set to the list of shared library paths to use with
1850.Xr ldconfig 8 .
1851NOTE:
1852.Pa /usr/lib
1853will always be added first, so it need not appear in this list.
1854.It Va ldconfig_insecure
1855.Pq Vt bool
1856The
1857.Xr ldconfig 8
1858utility normally refuses to use directories
1859which are writable by anyone except root.
1860Set this variable to
1861.Dq Li YES
1862to disable that security check during system startup.
1863.It Va kern_securelevel_enable
1864.Pq Vt bool
1865Set to
1866.Dq Li YES
1867to set the kernel security level at system startup.
1868.It Va kern_securelevel
1869.Pq Vt int
1870The kernel security level to set at startup.
1871The allowed range of
1872.Ar value
1873ranges from \-1 (the compile time default) to 3 (the
1874most secure).
1875See
1876.Xr init 8
1877for the list of possible security levels and their effect
1878on system operation.
1879.It Va lomac_enable
1880.Pq Vt bool
1881Set to
1882.Dq Li YES
1883to enable Low Watermark Mandatory Access Control (LOMAC) at boot time.
1884This security model enforces integrity constraints for system processes;
1885see
1886.Xr lomac 4
1887for a complete description of the LOMAC model, as well as its impact
1888on system operation.
1889.It Va start_vinum
1890.Pq Vt bool
1891Set to
1892.Dq Li YES
1893to start
1894.Xr vinum 8
1895at system boot time.
1896.It Va sshd_program
1897.Pq Vt str
1898Path to the SSH server program
1899.Pa ( /usr/sbin/sshd
1900is the default).
1901.It Va sshd_enable
1902.Pq Vt bool
1903Set to
1904.Dq Li YES
1905to start
1906.Xr sshd 8
1907at system boot time.
1908.It Va sshd_flags
1909.Pq Vt str
1910If
1911.Va sshd_enable
1912is set to
1913.Dq Li YES ,
1914these are the flags to pass to the
1915.Xr sshd 8
1916daemon.
1917.It Va unaligned_print
1918.Pq Vt bool
1919If set to
1920.Dq Li NO ,
1921unaligned access warnings will not be printed.
1922(alpha)
1923.\" ----- isdn settings ---------------------------------
1924.It Va isdn_enable
1925.Pq Vt bool
1926Set to
1927.Dq Li NO
1928by default.
1929When set to
1930.Dq Li YES ,
1931starts the
1932.Xr isdnd 8
1933daemon
1934at system boot time.
1935.It Va isdn_flags
1936.Pq Vt str
1937Set to
1938.Dq Fl d Ns Cm n Fl d Ns Li 0x1f9
1939by default.
1940Additional flags to pass to
1941.Xr isdnd 8
1942(but see
1943.Va isdn_fsdev
1944and
1945.Va isdn_ttype
1946for certain tunable parameters).
1947.It Va isdn_ttype
1948.Pq Vt str
1949Set to
1950.Dq Li cons25
1951by default.
1952The terminal type of the output device when
1953.Xr isdnd 8
1954operates in full-screen mode.
1955.It Va isdn_screenflags
1956.Pq Vt str
1957Set to
1958.Dq Li NO
1959by default.
1960The video mode for full-screen mode (only for
1961.Xr syscons 4
1962console driver, see
1963.Xr vidcontrol 1
1964for valid modes).
1965.It Va isdn_fsdev
1966.Pq Vt str
1967Set to
1968.Dq Li NO
1969by default.
1970The output device for
1971.Xr isdnd 8
1972in full-screen mode (or
1973.Dq Li NO
1974for daemon mode).
1975.It Va isdn_trace
1976.Pq Vt bool
1977Set to
1978.Dq Li NO
1979by default.
1980When set to
1981.Dq Li YES ,
1982enables the ISDN protocol trace utility
1983.Xr isdntrace 8
1984at system boot time.
1985.It Va isdn_traceflags
1986.Pq Vt str
1987Set to
1988.Dq Fl f Pa /var/tmp/isdntrace0
1989by default.
1990Flags for
1991.Xr isdntrace 8 .
1992.\" -----------------------------------------------------
1993.It Va pcvt_verbose
1994.Pq Vt bool
1995Set to
1996.Dq Li NO
1997by default.
1998When set to
1999.Dq Li YES ,
2000verbose messages about the actions done by the start script are displayed.
2001.Em Note :
2002the
2003.Xr pcvt 4
2004driver must be compiled into the kernel before the
2005.Xr pcvt 4
2006related
2007options described here take any effect.
2008.It Va pcvt_keymap
2009.Pq Vt str
2010Set to
2011.Dq Li NO
2012by default.
2013Use this to configure a national keyboard mapping found in the
2014.Pa /usr/share/misc/keycap.pcvt
2015file of keyboard mappings.
2016(See also the manual pages
2017.Xr keycap 5
2018and
2019.Xr keycap 3
2020for usage of
2021.Xr pcvt 4 Ns 's
2022keycap database and the manual page
2023.Xr kcon 1
2024option
2025.Fl m
2026for national keyboard mapping configuration.)
2027.It Va pcvt_keydel
2028.Pq Vt int
2029Set to
2030.Dq Li NO
2031by default.
2032Used to set the keyboard key repeat delay value.
2033Valid values are
2034in the range 0..3 for delay values of 250, 500, 750 and 1000 msec.
2035(See also the
2036.Xr kcon 1
2037manual page.)
2038.It Va pcvt_keyrate
2039.Pq Vt int
2040Set to
2041.Dq Li NO
2042by default.
2043Used to set the keyboard key repetition rate value.
2044Valid values are
2045in the range 0..31 for repetition values of 2..30 characters per second.
2046.It Va pcvt_keyrepeat
2047.Pq Vt bool
2048Set to
2049.Dq Li NO
2050by default.
2051Set to
2052.Dq Li YES
2053to enable automatic keyboard key repeating.
2054.It Va pcvt_force24
2055.Pq Vt bool
2056Set to
2057.Dq Li NO
2058by default.
2059Set to
2060.Dq Li YES
2061to force
2062.Xr pcvt 4
2063to use 24 lines only (in 25 lines mode) for compatibility
2064with the original
2065.Tn VT220
2066terminal.
2067.It Va pcvt_hpext
2068.Pq Vt bool
2069Set to
2070.Dq Li NO
2071by default.
2072Set to
2073.Dq Li YES
2074to enable the display and funtionality of function key labels (as found
2075on
2076.Tn Hewlett-Packard
2077terminals such as the
2078.Tn HP2392A
2079and the
2080.Tn HP700/92
2081in
2082.Tn ANSI
2083mode).
2084.It Va pcvt_lines
2085.Pq Vt int
2086Set to
2087.Dq Li NO
2088by default resulting in a value of 25.
2089Used to set the number of lines on the screen.
2090For VGA displays, valid
2091values are 25, 28, 40 and 50 lines.
2092(See also the
2093.Xr scon 1
2094manual page.)
2095.It Va pcvt_blanktime
2096.Pq Vt int
2097Set to
2098.Dq Li NO
2099by default.
2100Used to set the screen saver timeout in seconds for values greater than
2101zero.
2102.It Va pcvt_cursorh
2103.Pq Vt int
2104Set to
2105.Dq Li NO
2106by default.
2107Used to set the cursor top scanline.
2108(See also the
2109.Xr cursor 1
2110manual page.)
2111.It Va pcvt_cursorl
2112.Pq Vt int
2113Set to
2114.Dq Li NO
2115by default.
2116Used to set the cursor bottom scanline.
2117.It Va pcvt_monohigh
2118.Pq Vt bool
2119Set to
2120.Dq Li NO
2121by default.
2122Set to
2123.Dq Li YES
2124to set intensity to high on monochrome monitors.
2125(See also the
2126.Xr scon 1
2127manual page, option
2128.Fl p ,
2129for more information on changing VGA palette
2130values.)
2131.El
2132.Sh FILES
2133.Bl -tag -width ".Pa /etc/defaults/rc.conf" -compact
2134.It Pa /etc/defaults/rc.conf
2135.It Pa /etc/rc.conf
2136.It Pa /etc/rc.conf.local
2137.El
2138.Sh SEE ALSO
2139.Xr catman 1 ,
2140.Xr gdb 1 ,
2141.Xr info 1 ,
2142.Xr makewhatis 1 ,
2143.Xr vidcontrol 1 ,
2144.Xr tcp 4 ,
2145.Xr udp 4 ,
2146.Xr exports 5 ,
2147.Xr motd 5 ,
2148.Xr accton 8 ,
2149.Xr amd 8 ,
2150.Xr apm 8 ,
2151.Xr atm 8 ,
2152.Xr cron 8 ,
2153.Xr dhclient 8 ,
2154.Xr gated 8 ,
2155.Xr ifconfig 8 ,
2156.Xr inetd 8 ,
2157.Xr isdnd 8 ,
2158.Xr isdntrace 8 ,
2159.Xr lpd 8 ,
2160.Xr mdconfig 8 ,
2161.Xr moused 8 ,
2162.Xr mrouted 8 ,
2163.Xr named 8 ,
2164.Xr nfsd 8 ,
2165.Xr ntpd 8 ,
2166.Xr ntpdate 8 ,
2167.Xr pcnfsd 8 ,
2168.Xr quotacheck 8 ,
2169.Xr quotaon 8 ,
2170.Xr rc 8 ,
2171.Xr rc.sendmail 8 ,
2172.Xr route 8 ,
2173.Xr routed 8 ,
2174.Xr rpc.lockd 8 ,
2175.Xr rpc.statd 8 ,
2176.Xr rpcbind 8 ,
2177.Xr rwhod 8 ,
2178.Xr savecore 8 ,
2179.Xr sshd 8 ,
2180.Xr swapon 8 ,
2181.Xr sysctl 8 ,
2182.Xr syslogd 8 ,
2183.Xr timed 8 ,
2184.Xr vinum 8 ,
2185.Xr xtend 8 ,
2186.Xr yp 8 ,
2187.Xr ypbind 8 ,
2188.Xr ypserv 8 ,
2189.Xr ypset 8
2190.Sh HISTORY
2191The
2192.Nm
2193file appeared in
2194.Fx 2.2.2 .
2195.Sh AUTHORS
2196.An Jordan K. Hubbard .
|