rc.conf revision 178738
1#!/bin/sh
2
3# This is rc.conf - a file full of useful variables that you can set
4# to change the default startup behavior of your system.  You should
5# not edit this file!  Put any overrides into one of the ${rc_conf_files}
6# instead and you will be able to update these defaults later without
7# spamming your local configuration information.
8#
9# The ${rc_conf_files} files should only contain values which override
10# values set in this file.  This eases the upgrade path when defaults
11# are changed and new features are added.
12#
13# All arguments must be in double or single quotes.
14#
15# For a more detailed explanation of all the rc.conf variables, please
16# refer to the rc.conf(5) manual page.
17#
18# $FreeBSD: head/etc/defaults/rc.conf 178738 2008-05-03 07:06:48Z brooks $
19
20##############################################################
21###  Important initial Boot-time options  ####################
22##############################################################
23
24rc_debug="NO"		# Set to YES to enable debugging output from rc.d
25rc_info="NO"		# Enables display of informational messages at boot.
26rcshutdown_timeout="30" # Seconds to wait before terminating rc.shutdown
27early_late_divider="FILESYSTEMS"	# Script that separates early/late
28			# stages of the boot process.  Make sure you know
29			# the ramifications if you change this.
30			# See rc.conf(5) for more details.
31
32swapfile="NO"		# Set to name of swapfile if aux swapfile desired.
33apm_enable="NO"		# Set to YES to enable APM BIOS functions (or NO).
34apmd_enable="NO"	# Run apmd to handle APM event from userland.
35apmd_flags=""		# Flags to apmd (if enabled).
36ddb_enable="NO"		# Set to YES to load ddb scripts at boot.
37ddb_config="/etc/ddb.conf"	# ddb(8) config file.
38devd_enable="YES" 	# Run devd, to trigger programs on device tree changes.
39devd_flags=""		# Additional flags for devd(8).
40kldxref_enable="NO"	# Build linker.hints files with kldxref(8).
41kldxref_clobber="NO"	# Overwrite old linker.hints at boot.
42kldxref_module_path=""	# Override kern.module_path. A ';'-delimited list.
43powerd_enable="NO" 	# Run powerd to lower our power usage.
44powerd_flags=""		# Flags to powerd (if enabled).
45tmpmfs="AUTO"		# Set to YES to always create an mfs /tmp, NO to never
46tmpsize="20m"		# Size of mfs /tmp if created
47tmpmfs_flags="-S"	# Extra mdmfs options for the mfs /tmp
48varmfs="AUTO"		# Set to YES to always create an mfs /var, NO to never
49varsize="32m"		# Size of mfs /var if created
50varmfs_flags="-S"	# Extra mount options for the mfs /var
51populate_var="AUTO"	# Set to YES to always (re)populate /var, NO to never
52cleanvar_enable="YES" 	# Clean the /var directory
53local_startup="/usr/local/etc/rc.d" # startup script dirs.
54script_name_sep=" "	# Change if your startup scripts' names contain spaces
55rc_conf_files="/etc/rc.conf /etc/rc.conf.local"
56
57# ZFS support
58zfs_enable="NO"		# Set to YES to automatically mount ZFS file systems
59
60# Experimental - test before enabling
61gbde_autoattach_all="NO" # YES automatically mounts gbde devices from fstab
62gbde_devices="NO" 	# Devices to automatically attach (list, or AUTO)
63gbde_attach_attempts="3" # Number of times to attempt attaching gbde devices
64gbde_lockdir="/etc"	# Where to look for gbde lockfiles
65
66# GELI disk encryption configuration.
67geli_devices=""		# List of devices to automatically attach in addition to
68			# GELI devices listed in /etc/fstab.
69geli_tries=""		# Number of times to attempt attaching geli device.
70			# If empty, kern.geom.eli.tries will be used.
71geli_default_flags=""	# Default flags for geli(8).
72geli_autodetach="YES"	# Automatically detach on last close.
73			# Providers are marked as such when all file systems are
74			# mounted.
75# Example use.
76#geli_devices="da1 mirror/home"
77#geli_da1_flags="-p -k /etc/geli/da1.keys"
78#geli_da1_autodetach="NO"
79#geli_mirror_home_flags="-k /etc/geli/home.keys"
80
81geli_swap_flags="-e aes -l 256 -s 4096 -d"	# Options for GELI-encrypted
82						# swap partitions.
83
84root_rw_mount="YES"	# Set to NO to inhibit remounting root read-write.
85fsck_y_enable="NO"	# Set to YES to do fsck -y if the initial preen fails.
86background_fsck="YES"	# Attempt to run fsck in the background where possible.
87background_fsck_delay="60" # Time to wait (seconds) before starting the fsck.
88netfs_types="nfs:NFS nfs4:NFS4 smbfs:SMB portalfs:PORTAL nwfs:NWFS" # Net filesystems.
89extra_netfs_types="NO"	# List of network extra filesystem types for delayed
90			# mount at startup (or NO).
91
92##############################################################
93###  Network configuration sub-section  ######################
94##############################################################
95
96### Basic network and firewall/security options: ###
97hostname=""			# Set this!
98hostid_enable="YES"		# Set host UUID.
99hostid_file="/etc/hostid"	# File with hostuuid.
100nisdomainname="NO"		# Set to NIS domain if using NIS (or NO).
101dhclient_program="/sbin/dhclient"	# Path to dhcp client program.
102dhclient_flags=""		# Extra flags to pass to dhcp client.
103#dhclient_flags_fxp0=""		# Extra dhclient flags for fxp0 only
104background_dhclient="NO"	# Start dhcp client in the background.
105#background_dhclient_fxp0="YES"	# Start dhcp client on fxp0 in the background.
106synchronous_dhclient="YES"	# Start dhclient directly on configured
107				# interfaces during startup.
108wpa_supplicant_program="/usr/sbin/wpa_supplicant"
109wpa_supplicant_flags="-s"	# Extra flags to pass to wpa_supplicant
110wpa_supplicant_conf_file="/etc/wpa_supplicant.conf"
111#
112firewall_enable="NO"		# Set to YES to enable firewall functionality
113firewall_script="/etc/rc.firewall" # Which script to run to set up the firewall
114firewall_type="UNKNOWN"		# Firewall type (see /etc/rc.firewall)
115firewall_quiet="NO"		# Set to YES to suppress rule display
116firewall_logging="NO"		# Set to YES to enable events logging
117firewall_flags=""		# Flags passed to ipfw when type is a file
118firewall_myservices=""		# List of TCP ports on which this host
119				#  offers services
120firewall_allowservices=""	# List of IPs which has access to
121				#  $firewall_myservices
122firewall_trusted=""		# List of IPs which has full access to this host
123firewall_logdeny="NO"		# Set to YES to log default denied incoming
124				#  packets.
125firewall_nologports="135-139,445 1026,1027 1433,1434" # List of TCP/UDP ports
126				#  for which denied incoming packets are not
127				#  logged.
128firewall_nat_enable="NO"	# Enable kernel NAT (if firewall_enable == YES)
129firewall_nat_interface=""	# Public interface or IPaddress to use
130firewall_nat_flags=""		# Additional configuration parameters
131dummynet_enable="NO"		# Load the dummynet(4) module
132ip_portrange_first="NO"		# Set first dynamically allocated port
133ip_portrange_last="NO"		# Set last dynamically allocated port
134ike_enable="NO"			# Enable IKE daemon (usually racoon or isakmpd)
135ike_program="/usr/local/sbin/isakmpd"	# Path to IKE daemon
136ike_flags=""			# Additional flags for IKE daemon
137ipsec_enable="NO"		# Set to YES to run setkey on ipsec_file
138ipsec_file="/etc/ipsec.conf"	# Name of config file for setkey
139natd_program="/sbin/natd"	# path to natd, if you want a different one.
140natd_enable="NO"		# Enable natd (if firewall_enable == YES).
141natd_interface=""		# Public interface or IPaddress to use.
142natd_flags=""			# Additional flags for natd.
143ipfilter_enable="NO"		# Set to YES to enable ipfilter functionality
144ipfilter_program="/sbin/ipf"	# where the ipfilter program lives
145ipfilter_rules="/etc/ipf.rules"	# rules definition file for ipfilter, see
146				# /usr/src/contrib/ipfilter/rules for examples
147ipfilter_flags=""		# additional flags for ipfilter
148ipnat_enable="NO"		# Set to YES to enable ipnat functionality
149ipnat_program="/sbin/ipnat"	# where the ipnat program lives
150ipnat_rules="/etc/ipnat.rules"	# rules definition file for ipnat
151ipnat_flags=""			# additional flags for ipnat
152ipmon_enable="NO"		# Set to YES for ipmon; needs ipfilter or ipnat
153ipmon_program="/sbin/ipmon"	# where the ipfilter monitor program lives
154ipmon_flags="-Ds"		# typically "-Ds" or "-D /var/log/ipflog"
155ipfs_enable="NO"		# Set to YES to enable saving and restoring
156				# of state tables at shutdown and boot
157ipfs_program="/sbin/ipfs"	# where the ipfs program lives
158ipfs_flags=""			# additional flags for ipfs
159pf_enable="NO"			# Set to YES to enable packet filter (pf)
160pf_rules="/etc/pf.conf"		# rules definition file for pf
161pf_program="/sbin/pfctl"	# where the pfctl program lives
162pf_flags=""			# additional flags for pfctl
163pflog_enable="NO"		# Set to YES to enable packet filter logging
164pflog_logfile="/var/log/pflog"	# where pflogd should store the logfile
165pflog_program="/sbin/pflogd"	# where the pflogd program lives
166pflog_flags=""			# additional flags for pflogd
167ftpproxy_enable="NO"		# Set to YES to enable ftp-proxy(8) for pf
168ftpproxy_flags=""		# additional flags for ftp-proxy(8)
169pfsync_enable="NO"		# Expose pf state to other hosts for syncing
170pfsync_syncdev=""		# Interface for pfsync to work through
171pfsync_syncpeer=""		# IP address of pfsync peer host
172pfsync_ifconfig=""		# Additional options to ifconfig(8) for pfsync
173tcp_extensions="YES"		# Set to NO to turn off RFC1323 extensions.
174log_in_vain="0"			# >=1 to log connects to ports w/o listeners.
175tcp_keepalive="YES"		# Enable stale TCP connection timeout (or NO).
176tcp_drop_synfin="NO"		# Set to YES to drop TCP packets with SYN+FIN
177				# NOTE: this violates the TCP specification
178icmp_drop_redirect="NO" 	# Set to YES to ignore ICMP REDIRECT packets
179icmp_log_redirect="NO"		# Set to YES to log ICMP REDIRECT packets
180network_interfaces="auto"	# List of network interfaces (or "auto").
181cloned_interfaces=""		# List of cloned network interfaces to create.
182#cloned_interfaces="gif0 gif1 gif2 gif3" # Pre-cloning GENERIC config.
183ifconfig_lo0="inet 127.0.0.1"	# default loopback device configuration.
184#ifconfig_lo0_alias0="inet 127.0.0.254 netmask 0xffffffff" # Sample alias entry.
185#ifconfig_ed0_ipx="ipx 0x00010010"	# Sample IPX address family entry.
186#ifconfig_fxp0_name="net0"	# Change interface name from fxp0 to net0.
187#wlans_ath0="wlan0"		# wlan(4) interfaces for ath0 device
188#ipv4_addrs_fxp0="192.168.0.1/24 192.168.1.1-5/28" # example IPv4 address entry.
189#
190#autobridge_interfaces="bridge0"	# List of bridges to check 
191#autobridge_bridge0="tap* vlan0"	# Interface glob to automatically add to the bridge
192#
193# If you have any sppp(4) interfaces above, you might also want to set
194# the following parameters.  Refer to spppcontrol(8) for their meaning.
195sppp_interfaces=""		# List of sppp interfaces.
196#sppp_interfaces="isp0"		# example: sppp over ISDN
197#spppconfig_isp0="authproto=chap myauthname=foo myauthsecret='top secret' hisauthname=some-gw hisauthsecret='another secret'"
198gif_interfaces=""		# List of GIF tunnels.
199#gif_interfaces="gif0 gif1"	# Examples typically for a router.
200				# Choose correct tunnel addrs.
201#gifconfig_gif0="10.1.1.1 10.1.2.1"	# Examples typically for a router.
202#gifconfig_gif1="10.1.1.2 10.1.2.2"	# Examples typically for a router.
203fec_interfaces=""		# List of Fast EtherChannels.
204#fec_interfaces="fec0 fec1"
205#fecconfig_fec0="fxp0 dc0"	# Examples typically for two NICs
206#fecconfig_fec1="em0 em1 bge0 bge1"	# Examples typically for four NICs
207
208# User ppp configuration.
209ppp_enable="NO"		# Start user-ppp (or NO).
210ppp_program="/usr/sbin/ppp"	# Path to user-ppp program.
211ppp_mode="auto"		# Choice of "auto", "ddial", "direct" or "dedicated".
212			# For details see man page for ppp(8). Default is auto.
213ppp_nat="YES"		# Use PPP's internal network address translation or NO.
214ppp_profile="papchap"	# Which profile to use from /etc/ppp/ppp.conf.
215ppp_user="root"		# Which user to run ppp as
216
217# Start multiple instances of ppp at boot time
218#ppp_profile="profile1 profile2 profile3"	# Which profiles to use
219#ppp_profile1_mode="ddial"	# Override ppp mode for profile1
220#ppp_profile2_nat="NO"		# Override nat mode for profile2
221# profile3 uses default ppp_mode and ppp_nat
222
223### Network daemon (miscellaneous) ###
224hostapd_enable="NO"		# Run hostap daemon.
225syslogd_enable="YES"		# Run syslog daemon (or NO).
226syslogd_program="/usr/sbin/syslogd" # path to syslogd, if you want a different one.
227syslogd_flags="-s"		# Flags to syslogd (if enabled).
228inetd_enable="NO"		# Run the network daemon dispatcher (YES/NO).
229inetd_program="/usr/sbin/inetd"	# path to inetd, if you want a different one.
230inetd_flags="-wW -C 60"		# Optional flags to inetd
231#
232# named.  It may be possible to run named in a sandbox, man security for
233# details.
234#
235named_enable="NO"		# Run named, the DNS server (or NO).
236named_program="/usr/sbin/named"	# path to named, if you want a different one.
237#named_flags="" 		# Flags for named
238named_pidfile="/var/run/named/pid" # Must set this in named.conf as well
239named_uid="bind" 		# User to run named as
240named_chrootdir="/var/named"	# Chroot directory (or "" not to auto-chroot it)
241named_chroot_autoupdate="YES"	# Automatically install/update chrooted
242				# components of named. See /etc/rc.d/named.
243named_symlink_enable="YES"	# Symlink the chrooted pid file
244
245#
246# kerberos. Do not run the admin daemons on slave servers
247#
248kerberos5_server_enable="NO"	# Run a kerberos 5 master server (or NO).
249kerberos5_server="/usr/libexec/kdc"	# path to kerberos 5 KDC
250kerberos5_server_flags="--detach"	# Additional flags to the kerberos 5 server
251kadmind5_server_enable="NO"	# Run kadmind (or NO)
252kadmind5_server="/usr/libexec/kadmind"	# path to kerberos 5 admin daemon
253kpasswdd_server_enable="NO"	# Run kpasswdd (or NO)
254kpasswdd_server="/usr/libexec/kpasswdd"	# path to kerberos 5 passwd daemon
255
256rwhod_enable="NO"		# Run the rwho daemon (or NO).
257rwhod_flags=""			# Flags for rwhod
258rarpd_enable="NO"		# Run rarpd (or NO).
259rarpd_flags="-a"		# Flags to rarpd.
260bootparamd_enable="NO"		# Run bootparamd (or NO).
261bootparamd_flags=""		# Flags to bootparamd
262pppoed_enable="NO"		# Run the PPP over Ethernet daemon.
263pppoed_provider="*"		# Provider and ppp(8) config file entry.
264pppoed_flags="-P /var/run/pppoed.pid"	# Flags to pppoed (if enabled).
265pppoed_interface="fxp0"		# The interface that pppoed runs on.
266sshd_enable="NO"		# Enable sshd
267sshd_program="/usr/sbin/sshd"	# path to sshd, if you want a different one.
268sshd_flags=""			# Additional flags for sshd.
269ftpd_enable="NO"		# Enable stand-alone ftpd.
270ftpd_program="/usr/libexec/ftpd" # Path to ftpd, if you want a different one.
271ftpd_flags=""			# Additional flags to stand-alone ftpd.
272
273### Network daemon (NFS): All need rpcbind_enable="YES" ###
274amd_enable="NO"			# Run amd service with $amd_flags (or NO).
275amd_program="/usr/sbin/amd"	# path to amd, if you want a different one.
276amd_flags="-a /.amd_mnt -l syslog /host /etc/amd.map /net /etc/amd.map"
277amd_map_program="NO"		# Can be set to "ypcat -k amd.master"
278nfs_client_enable="NO"		# This host is an NFS client (or NO).
279nfs_access_cache="60"		# Client cache timeout in seconds
280nfs_server_enable="NO"		# This host is an NFS server (or NO).
281nfs_server_flags="-u -t -n 4"	# Flags to nfsd (if enabled).
282idmapd_enable="NO"		# Run the NFS4 id mapper (YES/NO).
283idmapd_flags=""			# Additional flags for idmapd.
284mountd_enable="NO"		# Run mountd (or NO).
285mountd_flags="-r"		# Flags to mountd (if NFS server enabled).
286weak_mountd_authentication="NO"	# Allow non-root mount requests to be served.
287nfs_reserved_port_only="NO"	# Provide NFS only on secure port (or NO).
288nfs_bufpackets=""		# bufspace (in packets) for client
289rpc_lockd_enable="NO"		# Run NFS rpc.lockd needed for client/server.
290rpc_lockd_flags=""		# Flags to rpc.lockd (if enabled).
291rpc_statd_enable="NO"		# Run NFS rpc.statd needed for client/server.
292rpc_statd_flags=""		# Flags to rpc.statd (if enabled).
293rpcbind_enable="NO"		# Run the portmapper service (YES/NO).
294rpcbind_program="/usr/sbin/rpcbind"	# path to rpcbind, if you want a different one.
295rpcbind_flags=""		# Flags to rpcbind (if enabled).
296rpc_ypupdated_enable="NO"	# Run if NIS master and SecureRPC (or NO).
297keyserv_enable="NO"		# Run the SecureRPC keyserver (or NO).
298keyserv_flags=""		# Flags to keyserv (if enabled).
299
300### Network Time Services options: ###
301timed_enable="NO"		# Run the time daemon (or NO).
302timed_flags=""			# Flags to timed (if enabled).
303ntpdate_enable="NO"		# Run ntpdate to sync time on boot (or NO).
304ntpdate_program="/usr/sbin/ntpdate"	# path to ntpdate, if you want a different one.
305ntpdate_flags="-b"		# Flags to ntpdate (if enabled).
306ntpdate_config="/etc/ntp.conf"	# ntpdate(8) configuration file
307ntpdate_hosts=""		# Whitespace-separated list of ntpdate(8) servers.
308ntpd_enable="NO"		# Run ntpd Network Time Protocol (or NO).
309ntpd_program="/usr/sbin/ntpd"	# path to ntpd, if you want a different one.
310ntpd_config="/etc/ntp.conf"	# ntpd(8) configuration file
311ntpd_sync_on_start="NO"		# Sync time on ntpd startup, even if offset is high
312ntpd_flags="-p /var/run/ntpd.pid -f /var/db/ntpd.drift"
313				# Flags to ntpd (if enabled).
314
315# Network Information Services (NIS) options: All need rpcbind_enable="YES" ###
316nis_client_enable="NO"		# We're an NIS client (or NO).
317nis_client_flags=""		# Flags to ypbind (if enabled).
318nis_ypset_enable="NO"		# Run ypset at boot time (or NO).
319nis_ypset_flags=""		# Flags to ypset (if enabled).
320nis_server_enable="NO"		# We're an NIS server (or NO).
321nis_server_flags=""		# Flags to ypserv (if enabled).
322nis_ypxfrd_enable="NO"		# Run rpc.ypxfrd at boot time (or NO).
323nis_ypxfrd_flags=""		# Flags to rpc.ypxfrd (if enabled).
324nis_yppasswdd_enable="NO"	# Run rpc.yppasswdd at boot time (or NO).
325nis_yppasswdd_flags=""		# Flags to rpc.yppasswdd (if enabled).
326
327### SNMP daemon ###
328# Be sure to understand the security implications of running SNMP v1/v2
329# in your network.
330bsnmpd_enable="NO"		# Run the SNMP daemon (or NO).
331bsnmpd_flags=""			# Flags for bsnmpd.
332
333### Network routing options: ###
334defaultrouter="NO"		# Set to default gateway (or NO).
335static_routes=""		# Set to static route list (or leave empty).
336natm_static_routes=""		# Set to static route list for NATM (or leave empty).
337gateway_enable="NO"		# Set to YES if this host will be a gateway.
338router_enable="NO"		# Set to YES to enable a routing daemon.
339router="/sbin/routed"		# Name of routing daemon to use if enabled.
340router_flags="-q"		# Flags for routing daemon.
341mrouted_enable="NO"		# Do IPv4 multicast routing.
342mrouted_program="/usr/local/sbin/mrouted"	# Name of IPv4 multicast
343						# routing daemon.  You need to
344						# install it from package or
345						# port.
346mrouted_flags=""		# Flags for multicast routing daemon.
347ipxgateway_enable="NO"		# Set to YES to enable IPX routing.
348ipxrouted_enable="NO"		# Set to YES to run the IPX routing daemon.
349ipxrouted_flags=""		# Flags for IPX routing daemon.
350arpproxy_all="NO"		# replaces obsolete kernel option ARP_PROXYALL.
351forward_sourceroute="NO"	# do source routing (only if gateway_enable is set to "YES")
352accept_sourceroute="NO"		# accept source routed packets to us
353
354### ATM interface options: ###
355atm_enable="NO"			# Configure ATM interfaces (or NO).
356#atm_netif_hea0="atm 1"		# Network interfaces for physical interface.
357#atm_sigmgr_hea0="uni31"	# Signalling manager for physical interface.
358#atm_prefix_hea0="ILMI"		# NSAP prefix (UNI interfaces only) (or ILMI).
359#atm_macaddr_hea0="NO"		# Override physical MAC address (or NO).
360#atm_arpserver_atm0="0x47.0005.80.999999.9999.9999.9999.999999999999.00" # ATMARP server address (or local).
361#atm_scsparp_atm0="NO"		# Run SCSP/ATMARP on network interface (or NO).
362atm_pvcs=""			# Set to PVC list (or leave empty).
363atm_arps=""			# Set to permanent ARP list (or leave empty).
364
365### ISDN interface options: (see also: /usr/share/examples/isdn) ###
366isdn_enable="NO"		# Enable the ISDN subsystem (or NO).
367isdn_fsdev="NO"			# Output device for fullscreen mode (or NO for daemon mode).
368isdn_flags="-dn -d0x1f9"	# Flags for isdnd
369isdn_ttype="cons25"		# terminal type for fullscreen mode
370isdn_screenflags="NO"		# screenflags for ${isdn_fsdev}
371isdn_trace="NO"			# Enable the ISDN trace subsystem (or NO).
372isdn_traceflags="-f /var/tmp/isdntrace0"	# Flags for isdntrace
373
374### Bluetooth ###
375hcsecd_enable="NO"		# Enable hcsecd(8) (or NO)
376hcsecd_config="/etc/bluetooth/hcsecd.conf" # hcsecd(8) configuration file
377
378sdpd_enable="NO"		# Enable sdpd(8) (or NO)
379sdpd_control="/var/run/sdp"	# sdpd(8) control socket
380sdpd_groupname="nobody"		# set spdp(8) user/group to run as after
381sdpd_username="nobody"		# it initializes
382
383bthidd_enable="NO"		# Enable bthidd(8) (or NO)
384bthidd_config="/etc/bluetooth/bthidd.conf" # bthidd(8) configuration file
385bthidd_hids="/var/db/bthidd.hids" # bthidd(8) known HID devices file
386
387rfcomm_pppd_server_enable="NO"	# Enable rfcomm_pppd(8) in server mode (or NO)
388rfcomm_pppd_server_profile="one two"	# Profile to use from /etc/ppp/ppp.conf
389#
390#rfcomm_pppd_server_one_bdaddr=""	# Override local bdaddr for 'one'
391rfcomm_pppd_server_one_channel="1"	# Override local channel for 'one'
392#rfcomm_pppd_server_one_register_sp="NO"	# Override SP and DUN register
393#rfcomm_pppd_server_one_register_dun="NO"	# for 'one'
394#
395#rfcomm_pppd_server_two_bdaddr=""	# Override local bdaddr for 'two'
396rfcomm_pppd_server_two_channel="3"	# Override local channel for 'two'
397#rfcomm_pppd_server_two_register_sp="NO"	# Override SP and DUN register
398#rfcomm_pppd_server_two_register_dun="NO"	# for 'two'
399
400### Miscellaneous network options: ###
401icmp_bmcastecho="NO"	# respond to broadcast ping packets
402
403### IPv6 options: ###
404ipv6_enable="NO"		# Set to YES to set up for IPv6.
405ipv6_network_interfaces="auto"	# List of network interfaces (or "auto").
406ipv6_defaultrouter="NO"		# Set to IPv6 default gateway (or NO).
407#ipv6_defaultrouter="2002:c058:6301::"	# Use this for 6to4 (RFC 3068)
408ipv6_static_routes=""		# Set to static route list (or leave empty).
409#ipv6_static_routes="xxx"	# An example to set fec0:0000:0000:0006::/64
410				#  route toward loopback interface.
411#ipv6_route_xxx="fec0:0000:0000:0006:: -prefixlen 64 ::1"
412ipv6_gateway_enable="NO"	# Set to YES if this host will be a gateway.
413ipv6_router_enable="NO"		# Set to YES to enable an IPv6 routing daemon.
414ipv6_router="/usr/sbin/route6d"	# Name of IPv6 routing daemon.
415ipv6_router_flags=""		# Flags to IPv6 routing daemon.
416#ipv6_router_flags="-l"		# Example for route6d with only IPv6 site local
417				# addrs.
418#ipv6_router_flags="-q"		# If you want to run a routing daemon on an end
419				# node, you should stop advertisement.
420#ipv6_network_interfaces="ed0 ep0"	# Examples for router
421					# or static configuration for end node.
422					# Choose correct prefix value.
423#ipv6_prefix_ed0="fec0:0000:0000:0001 fec0:0000:0000:0002"  # Examples for rtr.
424#ipv6_prefix_ep0="fec0:0000:0000:0003 fec0:0000:0000:0004"  # Examples for rtr.
425#ipv6_ifconfig_ed0="fec0:0:0:5::1 prefixlen 64"	# Sample manual assign entry
426#ipv6_ifconfig_ed0_alias0="fec0:0:0:5::2 prefixlen 64" # Sample alias entry.
427ipv6_default_interface="NO"	# Default output interface for scoped addrs.
428				# Now this works only for IPv6 link local
429				# multicast addrs.
430rtsol_flags=""			# Flags to IPv6 router solicitation.
431rtadvd_enable="NO"		# Set to YES to enable an IPv6 router
432				# advertisement daemon. If set to YES,
433				# this router becomes a possible candidate
434				# IPv6 default router for local subnets.
435rtadvd_interfaces=""		# Interfaces rtadvd sends RA packets.
436mroute6d_enable="NO"		# Do IPv6 multicast routing.
437mroute6d_program="/usr/local/sbin/pim6dd"	# Name of IPv6 multicast
438						# routing daemon.  You need to
439						# install it from package or
440						# port.
441mroute6d_flags=""		# Flags to IPv6 multicast routing daemon.
442stf_interface_ipv4addr=""	# Local IPv4 addr for 6to4 IPv6 over IPv4
443				# tunneling interface. Specify this entry
444				# to enable 6to4 interface.
445stf_interface_ipv4plen="0"	# Prefix length for 6to4 IPv4 addr,
446				# to limit peer addr range. Effective value
447				# is 0-31.
448stf_interface_ipv6_ifid="0:0:0:1"	# IPv6 interface id for stf0.
449				# If you like, you can set "AUTO" for this.
450stf_interface_ipv6_slaid="0000"	# IPv6 Site Level Aggregator for stf0
451ipv6_faith_prefix="NO"		# Set faith prefix to enable a FAITH
452				# IPv6-to-IPv4 TCP translator.  You also need
453				# faithd(8) setup.
454ipv6_ipv4mapping="NO"		# Set to "YES" to enable IPv4 mapped IPv6 addr
455				# communication. (like ::ffff:a.b.c.d)
456ipv6_firewall_enable="NO"	# Set to YES to enable IPv6 firewall
457				# functionality
458ipv6_firewall_script="/etc/rc.firewall6" # Which script to run to set up the IPv6 firewall
459ipv6_firewall_type="UNKNOWN"	# IPv6 Firewall type (see /etc/rc.firewall6)
460ipv6_firewall_quiet="NO"	# Set to YES to suppress rule display
461ipv6_firewall_logging="NO"	# Set to YES to enable events logging
462ipv6_firewall_flags=""		# Flags passed to ip6fw when type is a file
463ipv6_ipfilter_rules="/etc/ipf6.rules"	# rules definition file for ipfilter,
464					# see /usr/src/contrib/ipfilter/rules
465					# for examples
466ip6addrctl_enable="YES"	# Set to YES to enable default address selection
467ip6addrctl_verbose="NO"	# Set to YES to enable verbose configuration messages
468
469##############################################################
470###  System console options  #################################
471##############################################################
472
473keyboard=""		# keyboard device to use (default /dev/kbd0).
474keymap="NO"		# keymap in /usr/share/syscons/keymaps/* (or NO).
475keyrate="NO"		# keyboard rate to: slow, normal, fast (or NO).
476keybell="NO" 		# See kbdcontrol(1) for options.  Use "off" to disable.
477keychange="NO"		# function keys default values (or NO).
478cursor="NO"		# cursor type {normal|blink|destructive} (or NO).
479scrnmap="NO"		# screen map in /usr/share/syscons/scrnmaps/* (or NO).
480font8x16="NO"		# font 8x16 from /usr/share/syscons/fonts/* (or NO).
481font8x14="NO"		# font 8x14 from /usr/share/syscons/fonts/* (or NO).
482font8x8="NO"		# font 8x8 from /usr/share/syscons/fonts/* (or NO).
483blanktime="300"		# blank time (in seconds) or "NO" to turn it off.
484saver="NO"		# screen saver: Uses /boot/kernel/${saver}_saver.ko
485moused_nondefault_enable="YES" # Treat non-default mice as enabled unless
486			       # specifically overriden in rc.conf(5).
487moused_enable="NO"	# Run the mouse daemon.
488moused_type="auto"	# See man page for rc.conf(5) for available settings.
489moused_port="/dev/psm0"	# Set to your mouse port.
490moused_flags=""		# Any additional flags to moused.
491mousechar_start="NO"	# if 0xd0-0xd3 default range is occupied in your
492			# language code table, specify alternative range
493			# start like mousechar_start=3, see vidcontrol(1)
494allscreens_flags=""	# Set this vidcontrol mode for all virtual screens
495allscreens_kbdflags=""	# Set this kbdcontrol mode for all virtual screens
496
497##############################################################
498###  Mail Transfer Agent (MTA) options  ######################
499##############################################################
500
501mta_start_script="/etc/rc.sendmail"
502			# Script to start your chosen MTA, called by /etc/rc.
503# Settings for /etc/rc.sendmail and /etc/rc.d/sendmail:
504sendmail_enable="NO"	# Run the sendmail inbound daemon (YES/NO).
505sendmail_pidfile="/var/run/sendmail.pid"	# sendmail pid file
506sendmail_procname="/usr/sbin/sendmail"		# sendmail process name
507sendmail_flags="-L sm-mta -bd -q30m" # Flags to sendmail (as a server)
508sendmail_submit_enable="YES"	# Start a localhost-only MTA for mail submission
509sendmail_submit_flags="-L sm-mta -bd -q30m -ODaemonPortOptions=Addr=localhost"
510				# Flags for localhost-only MTA
511sendmail_outbound_enable="YES"	# Dequeue stuck mail (YES/NO).
512sendmail_outbound_flags="-L sm-queue -q30m" # Flags to sendmail (outbound only)
513sendmail_msp_queue_enable="YES"	# Dequeue stuck clientmqueue mail (YES/NO).
514sendmail_msp_queue_flags="-L sm-msp-queue -Ac -q30m"
515				# Flags for sendmail_msp_queue daemon.
516sendmail_rebuild_aliases="NO"	# Run newaliases if necessary (YES/NO).
517
518
519##############################################################
520###  Miscellaneous administrative options  ###################
521##############################################################
522
523auditd_enable="NO"	# Run the audit daemon.
524auditd_program="/usr/sbin/auditd"	# Path to the audit daemon.
525auditd_flags=""		# Which options to pass to the audit daemon.
526cron_enable="YES"	# Run the periodic job daemon.
527cron_program="/usr/sbin/cron"	# Which cron executable to run (if enabled).
528cron_dst="YES"		# Handle DST transitions intelligently (YES/NO)
529cron_flags=""		# Which options to pass to the cron daemon.
530lpd_enable="NO"		# Run the line printer daemon.
531lpd_program="/usr/sbin/lpd"	# path to lpd, if you want a different one.
532lpd_flags=""		# Flags to lpd (if enabled).
533nscd_enable="NO"	# Run the nsswitch caching daemon.
534chkprintcap_enable="NO"	# Run chkprintcap(8) before running lpd.
535chkprintcap_flags="-d"	# Create missing directories by default.
536dumpdev="AUTO"		# Device to crashdump to (device name, AUTO, or NO).
537dumpdir="/var/crash"	# Directory where crash dumps are to be stored
538savecore_flags=""	# Used if dumpdev is enabled above, and present.
539enable_quotas="NO"	# turn on quotas on startup (or NO).
540check_quotas="YES"	# Check quotas on startup (or NO).
541quotaon_flags="-a"	# Turn quotas on for all file systems (if enabled)
542quotaoff_flags="-a"	# Turn quotas off for all file systems at shutdown
543quotacheck_flags="-a"	# Check all file system quotas (if enabled)
544accounting_enable="NO"	# Turn on process accounting (or NO).
545ibcs2_enable="NO"	# Ibcs2 (SCO) emulation loaded at startup (or NO).
546ibcs2_loaders="coff"	# List of additional Ibcs2 loaders (or NO).
547
548# Emulation/compatibility services provided by /etc/rc.d/abi
549sysvipc_enable="NO"	# Load System V IPC primitives at startup (or NO).
550linux_enable="NO"	# Linux binary compatibility loaded at startup (or NO).
551svr4_enable="NO"	# SysVR4 emulation loaded at startup (or NO).
552
553clear_tmp_enable="NO"	# Clear /tmp at startup.
554clear_tmp_X="YES" 	# Clear and recreate X11-related directories in /tmp
555ldconfig_insecure="NO"	# Set to YES to disable ldconfig security checks
556ldconfig_paths="/usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg"
557			# shared library search paths
558ldconfig32_paths="/usr/lib32" # 32-bit compatibility shared library search paths
559ldconfig_paths_aout="/usr/lib/compat/aout /usr/local/lib/aout"
560			# a.out shared library search paths
561ldconfig_local_dirs="/usr/local/libdata/ldconfig"
562			# Local directories with ldconfig configuration files.
563ldconfig_local32_dirs="/usr/local/libdata/ldconfig32"
564			# Local directories with 32-bit compatibility ldconfig
565			# configuration files.
566kern_securelevel_enable="NO"	# kernel security level (see init(8)),
567kern_securelevel="-1"	# range: -1..3 ; `-1' is the most insecure
568			# Note that setting securelevel to 0 will result
569			# in the system booting with securelevel set to 1, as
570			# init(8) will raise the level when rc(8) completes.
571update_motd="YES"	# update version info in /etc/motd (or NO)
572entropy_file="/entropy"	# Set to NO to disable caching entropy through reboots.
573			# /var/db/entropy-file is preferred if / is not avail.
574entropy_dir="/var/db/entropy" # Set to NO to disable caching entropy via cron.
575entropy_save_sz="2048"	# Size of the entropy cache files.
576entropy_save_num="8"	# Number of entropy cache files to save.
577harvest_interrupt="YES"	# Entropy device harvests interrupt randomness
578harvest_ethernet="YES"	# Entropy device harvests ethernet randomness
579harvest_p_to_p="YES"	# Entropy device harvests point-to-point randomness
580dmesg_enable="YES"	# Save dmesg(8) to /var/run/dmesg.boot
581watchdogd_enable="NO"	# Start the software watchdog daemon
582devfs_rulesets="/etc/defaults/devfs.rules /etc/devfs.rules" # Files containing
583							    # devfs(8) rules.
584devfs_system_ruleset=""	# The name (NOT number) of a ruleset to apply to /dev
585devfs_set_rulesets=""	# A list of /mount/dev=ruleset_name settings to
586			# apply (must be mounted already, i.e. fstab(5))
587performance_cx_lowest="HIGH"	# Online CPU idle state
588performance_cpu_freq="NONE"	# Online CPU frequency
589economy_cx_lowest="HIGH"	# Offline CPU idle state
590economy_cpu_freq="NONE"		# Offline CPU frequency
591virecover_enable="YES"	# Perform housekeeping for the vi(1) editor
592ugidfw_enable="NO"	# Load mac_bsdextended(4) rules on boot
593bsdextended_script="/etc/rc.bsdextended"	# Default mac_bsdextended(4)
594						# ruleset file.
595newsyslog_enable="YES"	# Run newsyslog at startup.
596newsyslog_flags="-CN"	# Newsyslog flags to create marked files
597mixer_enable="YES"	# Run the sound mixer.
598
599##############################################################
600### Jail Configuration #######################################
601##############################################################
602jail_enable="NO"	# Set to NO to disable starting of any jails
603jail_list=""		# Space separated list of names of jails
604jail_set_hostname_allow="YES" # Allow root user in a jail to change its hostname
605jail_socket_unixiproute_only="YES" # Route only TCP/IP within a jail
606jail_sysvipc_allow="NO"	# Allow SystemV IPC use from within a jail
607
608#
609# To use rc's built-in jail infrastructure create entries for
610# each jail, specified in jail_list, with the following variables.
611# NOTES:
612# - replace 'example' with the jail's name.
613# - except rootdir, hostname and ip, all of the following variables may be made
614#   global jail variables if you don't specify a jail name (ie. jail_interface).
615#
616#jail_example_rootdir="/usr/jail/default"	# Jail's root directory
617#jail_example_hostname="default.domain.com"	# Jail's hostname
618#jail_example_ip="192.168.0.10"			# Jail's IP number
619#jail_example_interface=""			# Interface to create the IP alias on
620#jail_example_exec_start="/bin/sh /etc/rc"		# command to execute in jail for starting
621#jail_example_exec_afterstart0="/bin/sh command"	# command to execute after the one for 
622							# starting the jail. More than one can be
623							# specified using a trailing number
624#jail_example_exec_stop="/bin/sh /etc/rc.shutdown"	# command to execute in jail for stopping
625#jail_example_devfs_enable="NO"			# mount devfs in the jail
626#jail_example_fdescfs_enable="NO"		# mount fdescfs in the jail
627#jail_example_procfs_enable="NO"		# mount procfs in jail
628#jail_example_mount_enable="NO"			# mount/umount jail's fs
629#jail_example_devfs_ruleset="ruleset_name"	# devfs ruleset to apply to jail
630#jail_example_fstab=""				# fstab(5) for mount/umount
631#jail_example_flags="-l -U root"		# flags for jail(8)
632
633##############################################################
634### Define source_rc_confs, the mechanism used by /etc/rc.* ##
635### scripts to source rc_conf_files overrides safely.	    ##
636##############################################################
637
638if [ -z "${source_rc_confs_defined}" ]; then
639	source_rc_confs_defined=yes
640	source_rc_confs () {
641		local i sourced_files
642		for i in ${rc_conf_files}; do
643			case ${sourced_files} in
644			*:$i:*)
645				;;
646			*)
647				sourced_files="${sourced_files}:$i:"
648				if [ -r $i ]; then
649					. $i
650				fi
651				;;
652			esac
653		done
654	}
655fi
656