pfsense/etc
Scott Ullrich be58a5d107 Use -o when loading the pf ruleset. From the pfctl man page: -o Enable the ruleset optimizer. The ruleset optimizer attempts to improve rulesets by removing rule duplication and making better use of rule ordering. Specifically, it does four things: 1. remove duplicate rules 2. remove rules that are a subset of another rule 3. combine multiple rules into a table when advantageous 4. re-order the rules to improve evaluation performance A second -o may be specified to use the currently loaded ruleset as a feedback profile to tailor the optimization of the quick rules to the actual network behavior. It is important to note that the ruleset optimizer will modify the ruleset to improve performance. A side effect of the ruleset modification is that per-rule accounting statistics will have different meanings than before.
Use -o when loading the pf ruleset.  From the pfctl man page:

     -o      Enable the ruleset optimizer.  The ruleset optimizer attempts to
             improve rulesets by removing rule duplication and making better
             use of rule ordering.  Specifically, it does four things:

             1.   remove duplicate rules
             2.   remove rules that are a subset of another rule
             3.   combine multiple rules into a table when advantageous
             4.   re-order the rules to improve evaluation performance

             A second -o may be specified to use the currently loaded ruleset
             as a feedback profile to tailor the optimization of the quick
             rules to the actual network behavior.

             It is important to note that the ruleset optimizer will modify
             the ruleset to improve performance.  A side effect of the ruleset
             modification is that per-rule accounting statistics will have
             different meanings than before.
2007-04-07 02:10:12 +00:00
..
ascii-art Widen logo a hair 2005-08-28 01:44:34 +00:00
inc Use -o when loading the pf ruleset. From the pfctl man page: -o Enable the ruleset optimizer. The ruleset optimizer attempts to improve rulesets by removing rule duplication and making better use of rule ordering. Specifically, it does four things: 1. remove duplicate rules 2. remove rules that are a subset of another rule 3. combine multiple rules into a table when advantageous 4. re-order the rules to improve evaluation performance A second -o may be specified to use the currently loaded ruleset as a feedback profile to tailor the optimization of the quick rules to the actual network behavior. It is important to note that the ruleset optimizer will modify the ruleset to improve performance. A side effect of the ruleset modification is that per-rule accounting statistics will have different meanings than before. 2007-04-07 02:10:12 +00:00
ssh Set ClientAliveCountMax to 5. 2006-10-17 17:12:07 +00:00
ssl Create certificate for HTTP Server option 2004-11-17 22:59:17 +00:00
auth.conf Initial revision 2004-11-07 03:06:49 +00:00
bogons MFC 13992 2006-08-25 03:38:56 +00:00
crontab Backport cron handling from HEAD. 2007-01-29 04:09:12 +00:00
current-supfile Use /root/ 2006-01-13 23:39:47 +00:00
devd.conf Do not process link down events. we may revert this but lets let Scott test. 2007-02-14 05:49:33 +00:00
disktab Initial revision 2004-11-07 03:06:49 +00:00
fbtab Initial revision 2004-11-07 03:06:49 +00:00
gettytab Actually enable the serial port correctly and present the menu when needed. 2006-09-08 20:45:53 +00:00
group Add _ntp to passwd and group 2006-10-02 21:37:22 +00:00
host.conf Initial revision 2004-11-07 03:06:49 +00:00
hosts.allow Initial revision 2004-11-07 03:06:49 +00:00
libmap.conf Add library mapping 2005-11-15 17:29:20 +00:00
login.conf * Turnoff console idle time feature * Ensure capabilities database is created on each boot 2007-02-21 22:28:03 +00:00
master.passwd OpenNTPD requires _ntp user and group 2006-10-02 21:31:40 +00:00
motd Add trailing space 2005-06-21 02:58:06 +00:00
networks Initial revision 2004-11-07 03:06:49 +00:00
pamd.conf Initial revision 2004-11-07 03:06:49 +00:00
passwd Add _ntp to passwd and group 2006-10-02 21:37:22 +00:00
pccard.conf Initial revision 2004-11-07 03:06:49 +00:00
pf.os Add custom os.pf file which includes the latest versino of FreeBSD 2005-05-15 16:46:13 +00:00
platform update platform to pfSense 2004-11-24 23:51:30 +00:00
protocols add pfsync to /etc/protocols. 2005-03-17 20:53:11 +00:00
pubkey.pem Update release key 2005-11-08 04:58:23 +00:00
rc Remove cron spam on bootup 2007-03-26 23:29:46 +00:00
rc.banner Nuke the console detection code. The bug appears to be gone with the recent banner changes. 2006-06-11 03:11:59 +00:00
rc.bootup Do ourself a favor and start the time sync after we configured the interfaces. 2007-03-06 21:47:48 +00:00
rc.captiveportal_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.cdrom Set export VARMFS_COPYDBPKG=yes during varmfs mounting so that we can see the entire /var/db/pkg/$PACKAGENAME/$CONTENTS structure 2006-09-06 22:06:45 +00:00
rc.conf_mount_ro Correct filenames in (C) header 2006-09-22 19:48:39 +00:00
rc.conf_mount_rw Correct filenames in (C) header 2006-09-22 19:48:39 +00:00
rc.dhclient_cron Check DHCP interfaces every 6 hours for dhclient issues. Launch dhclient if it is not bound to an interface correctly. 2006-12-12 18:18:50 +00:00
rc.dyndns.storecache Exit 0 2005-07-10 21:16:02 +00:00
rc.dyndns.update Zap Informational: services_dyndns_configure() is starting. 2006-06-30 17:37:26 +00:00
rc.embedded Use a much larger growable ram disk (128 megs) vs the default low one. 2006-09-01 21:40:09 +00:00
rc.filter_configure Invalidate the cache before reloading filter. 2006-09-26 18:42:59 +00:00
rc.filter_configure_sync These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.firmware Run /tmp/post_upgrade_command after update if it exists 2006-10-03 22:01:23 +00:00
rc.firmware_auto Echo to WALL when upgrades begin 2006-04-02 23:01:48 +00:00
rc.halt Do not reboot or halt if a config_write() operation is in progress 2006-03-13 06:07:56 +00:00
rc.initial ctrl-c is handy in the shell. Do not lock out. 2007-03-02 17:32:15 +00:00
rc.initial.defaults Add $Id$ tags 2005-03-27 22:39:00 +00:00
rc.initial.halt Add $Id$ tags 2005-03-27 22:39:00 +00:00
rc.initial.password Alert to user we are changing default username back to admin on reset password. 2006-04-21 01:25:34 +00:00
rc.initial.ping Add $Id$ tags 2005-03-27 22:39:00 +00:00
rc.initial.reboot Add $Id$ tags 2005-03-27 22:39:00 +00:00
rc.initial.setlanip point out that a browser is a "web browser" for the technically challanged 2005-07-12 05:00:52 +00:00
rc.initial.setports MFC Seths most excellent RRD graphing items 2006-03-21 23:07:28 +00:00
rc.initial.store_config_to_removable_device Remove deep south twang... You're Your 2006-03-12 20:41:29 +00:00
rc.interfaces_carp_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.interfaces_lan_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.interfaces_opt_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.interfaces_wan_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.linkup rc.linkup is a event queue of sorts. It needs to to loop through all arguments and process them in the order that they where received in. 2007-03-12 21:34:34 +00:00
rc.linkup.sh Remove /tmp/rc.linkup after processing 2007-02-02 18:31:52 +00:00
rc.newwanip Exit after restarting dhclient. 2007-02-19 05:31:07 +00:00
rc.ntpdate Add perioditc ntpdate script 2005-09-15 00:15:31 +00:00
rc.packages CORRECTLY set the package output area 2007-02-22 20:42:01 +00:00
rc.prunecaptiveportal Add $Id$ tags 2005-03-27 22:39:00 +00:00
rc.reboot Woops, cd to / and then tar 2007-02-18 23:23:35 +00:00
rc.reload_all Log when we are relaoding all settings 2005-11-20 04:22:40 +00:00
rc.reload_interfaces OpenVPN cleanups by mposch@gmail.com 2006-01-30 02:25:00 +00:00
rc.restart_webgui Make sure RRD is running after a cvs_sync.sh. Gary reported that RRD is stopping after EVERY cvs_sync.sh 2006-04-19 15:56:17 +00:00
rc.shutdown Woops, cd to / and then tar 2007-02-18 23:23:35 +00:00
rc.start_packages Do not output Syncing packages twice, once is enough. 2007-02-23 01:24:54 +00:00
rc.stop_packages * Move stop package code out to it's own file rc.stop_packages 2006-11-17 15:46:40 +00:00
rc.update_bogons.sh Match on the beginning of the string so that the 110 network is included 2006-09-12 20:05:36 +00:00
services Add spamd-cfg to services 2006-01-28 00:20:26 +00:00
shells Remove bash from /etc/shells (it isn't installed). 2005-03-07 03:30:05 +00:00
sshd MFC 15495 2006-12-05 17:52:48 +00:00
sysctl.conf Remove bad sysctl 2006-12-21 20:55:34 +00:00
syslog.conf * Send ipsec log to system for the time being 2005-07-11 00:07:59 +00:00
ttys Missed commits 2006-09-08 21:27:23 +00:00
ttys_wrap Fix the no job control errors. 2005-12-11 22:25:54 +00:00
version Version bump 2007-03-27 23:24:45 +00:00
version_base Version bump 2007-03-16 00:50:40 +00:00
version_kernel Version bump 2007-03-16 00:50:40 +00:00