[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: initial pf-rules -> sysctl -> networking



Hi Han

The practical reason for this is that if you're increasing your kernel 
security level from 1 (default) to 2 it becomes impossible to alter the 
pf rule file. So you've to load it before the sysctls modify the kernel 
security level.

Greez Simon

Han Boetes wrote:
> Hi,
> 
> In /etc/rc first the initial pf-rules are loaded and then the sysctls
> are loaded and then networking is started.
> It seems to be more logical to first load the sysctl, then load the
> initial pf-rules and then networking is started.
> 
> So what's the practical reason for this order?
> 
> 
> 
> # Han