1.\" Copyright (c) 1995 2.\" Jordan K. Hubbard 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 13.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND 14.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 16.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE 17.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23.\" SUCH DAMAGE. 24.\" 25.\" $FreeBSD: src/share/man/man5/rc.conf.5,v 1.197 2003/07/28 13:56:00 mbr Exp $ 26.\" $DragonFly: src/share/man/man5/rc.conf.5,v 1.43 2007/07/13 07:36:26 swildner Exp $ 27.Dd July 13, 2007 28.Dt RC.CONF 5 29.Os 30.Sh NAME 31.Nm rc.conf 32.Nd system configuration information 33.Sh DESCRIPTION 34The file 35.Nm 36contains descriptive information about the local host name, configuration 37details for any potential network interfaces and which services should be 38started up at system initial boot time. 39In new installations, the 40.Nm 41file is generally initialized by the installer. 42.Pp 43The purpose of 44.Nm 45is not to run commands or perform system startup actions directly. 46Instead, it is included by the various generic startup scripts in 47.Pa /etc 48which conditionalize their 49internal actions according to the settings found there. 50.Pp 51The 52.Pa /etc/rc.conf 53file is included from the file 54.Pa /etc/defaults/rc.conf , 55which specifies the default settings for all the available options. 56Options need only be specified in 57.Pa /etc/rc.conf 58when the system administrator wishes to override these defaults. 59The file 60.Pa /etc/rc.conf.local 61is used to override settings in 62.Pa /etc/rc.conf 63for historical reasons. 64See the 65.Va rc_conf_files 66variable below. 67.Pp 68The following list provides a name and short description for each 69variable that can be set in the 70.Nm 71file: 72.Bl -tag -width indent-two 73.It Va rc_debug 74.Pq Vt bool 75If set to 76.Dq Li YES , 77enable output of debug messages from rc scripts. 78This variable can be helpful in diagnosing mistakes when 79editing or integrating new scripts. 80Beware that this produces copious output to the terminal and 81.Xr syslog 3 . 82.It Va rc_info 83.Pq Vt bool 84If set to 85.Dq Li NO , 86disable informational messages from the rc scripts. 87Informational messages are displayed when 88a condition that is not serious enough to warrant a warning or an error occurs. 89.It Va swapfile 90.Pq Vt str 91If set to 92.Dq Li NO , 93no swapfile is installed, otherwise the value is used as the full 94pathname to a file to use for additional swap space. 95.It Va apm_enable 96.Pq Vt bool 97If set to 98.Dq Li YES , 99enable support for Automatic Power Management with the 100.Xr apm 8 101command. 102.It Va apmd_enable 103.Pq Vt bool 104Run 105.Xr apmd 8 106to handle APM event from userland. 107This also enables support for APM. 108.It Va apmd_flags 109.Pq Vt str 110If 111.Va apmd_enable 112is set to 113.Dq Li YES , 114these are the flags to pass to the 115.Xr apmd 8 116daemon. 117.It Va battd_enable 118Enable 119.Xr battd 8 120to monitor the status of batteries present in the system. 121This also enables support for APM. 122.It Va battd_flags 123.Pq Vt str 124If 125.Va battd_enable 126is set to 127.Dq Li YES , 128these are the flags to pass to the 129.Xr battd 8 130daemon. 131.It Va pccard_ifconfig 132.Pq Vt str 133List of arguments to be passed to 134.Xr ifconfig 8 135at boot time or on insertion of the card (e.g.\& 136.Dq Cm inet Li 192.168.1.1 Cm netmask Li 255.255.255.0 137for a fixed address or 138.Dq Li DHCP 139for a DHCP client). 140.It Va pccard_ether_delay 141.Pq Vt str 142Set the delay before starting 143.Xr dhclient 8 144in the 145.Pa /etc/pccard_ether 146script. 147This defaults to 5 seconds to work around a bug in the 148.Xr ed 4 149driver which can lead to system hangs when using some newer 150.Xr ed 4 151based cards. 152.It Va removable_interfaces 153.Pq Vt str 154List of removable network interfaces to be supported by 155.Pa /etc/pccard_ether . 156.It Va local_startup 157.Pq Vt str 158List of directories to search for startup script files. 159.It Va script_name_sep 160.Pq Vt str 161The field separator to use for breaking down the list of startup script files 162into individual filenames. 163The default is a space. 164It is not necessary to change this unless there are startup scripts with names 165containing spaces. 166.It Va hostapd_enable 167.Pq Vt bool 168Set to 169.Dq Li YES 170to start 171.Xr hostapd 8 172at system boot time. 173.It Va hostname 174.Pq Vt str 175The fully qualified domain name (FQDN) of this host on the network. 176This should almost certainly be set to something meaningful, even if 177there is no network connection. 178If 179.Xr dhclient 8 180is used to set the hostname via DHCP, 181this variable should be set to an empty string. 182.It Va ipv6_enable 183.Pq Vt bool 184Enable support for IPv6 networking. 185Note that this requires that the kernel have been compiled with 186.Cd "options INET6" . 187.It Va nisdomainname 188.Pq Vt str 189The NIS domain name of this host, or 190.Dq Li NO 191if NIS is not used. 192.It Va dhclient_program 193.Pq Vt str 194Path to the DHCP client program 195.Pa ( /sbin/dhclient , 196the ISC DHCP client, is the default). 197.It Va dhclient_flags 198.Pq Vt str 199Additional flags to pass to the DHCP client program. 200For the ISC DHCP client, see the 201.Xr dhclient 8 202manpage for a description of the command line options available. 203.\".It Va background_dhclient 204.\".Pq Vt bool 205.\"Set to 206.\".Dq Li YES 207.\"to start the DHCP client in background. 208.\"This can cause trouble with applications depending on 209.\"a working network, but it will provide a faster startup in many cases. 210.It Va dhcpd_enable 211.Pq Vt bool 212Set to 213.Dq Li YES 214to run 215.Xr dhcpd 8 216at system boot time. 217.It Va dhcrelay_enable 218.Pq Vt bool 219Set to 220.Dq Li YES 221to run 222.Xr dhcrelay 8 223.It Va pf_enable 224.Pq Vt bool 225Set to 226.Dq Li YES 227to load 228.Xr pf 4 229at startup. 230If the kernel was not built with 231.Cd "device pf" , 232the 233.Pa pf.ko 234kernel module will be loaded. 235See also 236.Va firewall_enable 237and 238.Va ipfilter_enable . 239.It Va pf_rules 240.Pq Vt str 241Path to the 242.Xr pf 4 243ruleset definition file. 244.It Va pf_program 245.Pq Vt str 246Path to 247.Xr pfctl 8 . 248.It Va pf_flags 249.Pq Vt str 250If 251.Va pf_enable 252is set to 253.Dq Li YES , 254these are the flags to pass to 255.Xr pfctl 8 256when loading the ruleset. 257.It Va pflog_enable 258.Pq Vt bool 259Set this to 260.Dq Li YES 261to enable 262.Xr pflogd 8 263which logs packets from 264.Xr pf 4 . 265.It Va pflog_logfile 266.Pq Vt str 267If 268.Va pflog_enable 269is set to 270.Dq Li YES 271this specifies the path of the log file. 272.It Va pflog_program 273.Pq Vt str 274Path to 275.Xr pflogd 8 . 276.It Va pflog_flags 277.Pq Vt str 278If 279.Va pflog_enable 280is set to 281.Dq Li YES , 282these are the flags to pass to 283.Xr pflogd 8 . 284.It Va firewall_enable 285.Pq Vt bool 286Set to 287.Dq Li YES 288to load firewall rules at startup. 289If the kernel was not built with 290.Cd "options IPFIREWALL" , 291the 292.Pa ipfw.ko 293kernel module will be loaded. 294See also 295.Va pf_enable 296and 297.Va ipfilter_enable . 298.It Va ipv6_firewall_enable 299.Pq Vt bool 300The IPv6 equivalent of 301.Va firewall_enable . 302Set to 303.Dq Li YES 304to load IPv6 firewall rules at startup. 305If the kernel was not built with 306.Cd "options IPV6FIREWALL" , 307the 308.Pa ip6fw.ko 309kernel module will be loaded. 310.It Va firewall_script 311.Pq Vt str 312This variable specifies the full path to the firewall script to run. 313The default is 314.Pa /etc/rc.firewall . 315.It Va ipv6_firewall_script 316.Pq Vt str 317The IPv6 equivalent of 318.Va firewall_script . 319.It Va firewall_type 320.Pq Vt str 321Names the firewall type from the selection in 322.Pa /etc/rc.firewall , 323or the file which contains the local firewall ruleset. 324Valid selections from 325.Pa /etc/rc.firewall 326are: 327.Pp 328.Bl -tag -width ".Li simple" -compact 329.It Li open 330unrestricted IP access 331.It Li closed 332all IP services disabled, except via 333.Dq Li lo0 334.It Li client 335basic protection for a workstation on a LAN 336.It Li simple 337alias for 338.Li client . 339.El 340.Pp 341If a filename is specified, the full path must be given. 342.It Va firewall_trusted_nets 343.Pq Vt str 344List of trusted networks (if 345.Va firewall_type 346is set to 347.Li client ) . 348.It Va firewall_trusted_interfaces 349.Pq Vt str 350List of trusted network interfaces (if 351.Va firewall_type 352is set to 353.Li client ) . 354.It Va firewall_allowed_icmp_types 355.Pq Vt str 356List of allowed ICMP types (if 357.Va firewall_type 358is set to 359.Li client ) . 360.It Va firewall_open_tcp_ports 361.Pq Vt str 362List of TCP ports to open (if 363.Va firewall_type 364is set to 365.Li client ) . 366.It Va firewall_open_udp_ports 367.Pq Vt str 368List of UDP ports to open (if 369.Va firewall_type 370is set to 371.Li client ) . 372.It Va ipv6_firewall_type 373.Pq Vt str 374The IPv6 equivalent of 375.Va firewall_type . 376.It Va firewall_quiet 377.Pq Vt bool 378Set to 379.Dq Li YES 380to disable the display of firewall rules on the console during boot. 381.It Va ipv6_firewall_quiet 382.Pq Vt bool 383The IPv6 equivalent of 384.Va firewall_quiet . 385.It Va firewall_logging 386.Pq Vt bool 387Set to 388.Dq Li YES 389to enable firewall event logging. 390This is equivalent to the 391.Dv IPFIREWALL_VERBOSE 392kernel option. 393.It Va ipv6_firewall_logging 394.Pq Vt bool 395The IPv6 equivalent of 396.Va firewall_logging . 397.It Va firewall_flags 398.Pq Vt str 399Flags passed to 400.Xr ipfw 8 401if 402.Va firewall_type 403specifies a filename. 404.It Va ipv6_firewall_flags 405.Pq Vt str 406The IPv6 equivalent of 407.Va firewall_flags . 408.It Va natd_program 409.Pq Vt str 410Path to 411.Xr natd 8 . 412.It Va natd_enable 413.Pq Vt bool 414Set to 415.Dq Li YES 416to enable 417.Xr natd 8 . 418.Va firewall_enable 419must also be set to 420.Dq Li YES , 421and 422.Xr divert 4 423sockets must be enabled in the kernel. 424.It Va natd_interface 425.Pq Vt str 426This is the name of the public interface on which 427.Xr natd 8 428should run. 429The interface may be given as an interface name or as an IP address. 430.It Va natd_flags 431.Pq Vt str 432Additional 433.Xr natd 8 434flags should be placed here. 435The 436.Fl n 437or 438.Fl a 439flag is automatically added with the above 440.Va natd_interface 441as an argument. 442.\" ----- ipfilter_enable setting -------------------------------- 443.It Va ipfilter_enable 444.Pq Vt bool 445Set to 446.Dq Li NO 447by default. 448Setting this to 449.Dq Li YES 450enables 451.Xr ipf 8 452packet filtering. 453.Pp 454Typical usage will require putting 455.Bd -literal 456ipfilter_enable="YES" 457ipnat_enable="YES" 458ipmon_enable="YES" 459ipfs_enable="YES" 460.Ed 461.Pp 462into 463.Pa /etc/rc.conf 464and editing 465.Pa /etc/ipf.rules 466and 467.Pa /etc/ipnat.rules 468appropriately. 469.Pp 470Note that 471.Va ipfilter_enable 472and 473.Va ipnat_enable 474can be enabled independently. 475.Va ipmon_enable 476and 477.Va ipfs_enable 478both require at least one of 479.Va ipfilter_enable 480and 481.Va ipnat_enable 482to be enabled. 483.Pp 484Having 485.Bd -literal 486options IPFILTER 487options IPFILTER_LOG 488options IPFILTER_DEFAULT_BLOCK 489.Ed 490.Pp 491in the kernel configuration file is a good idea, too. 492See also 493.Va pf_enable 494and 495.Va firewall_enable . 496.\" ----- ipfilter_program setting ------------------------------ 497.It Va ipfilter_program 498.Pq Vt str 499Path to 500.Xr ipf 8 501(default 502.Pa /sbin/ipf ) . 503.\" ----- ipfilter_rules setting -------------------------------- 504.It Va ipfilter_rules 505.Pq Vt str 506Set to 507.Pa /etc/ipf.rules 508by default. 509This variable contains the name of the filter rule definition file. 510The file is expected to be readable for the 511.Xr ipf 8 512command to execute. 513.\" ----- ipv6_ipfilter_rules setting --------------------------- 514.It Va ipv6_ipfilter_rules 515.Pq Vt str 516Set to 517.Pa /etc/ipf6.rules 518by default. 519This variable contains the IPv6 filter rule definition file. 520The file is expected to be readable for the 521.Xr ipf 8 522command to execute. 523.\" ----- ipfilter_flags setting -------------------------------- 524.It Va ipfilter_flags 525.Pq Vt str 526Empty by default. 527This variable contains flags passed to the 528.Xr ipf 8 529program. 530.\" ----- ipnat_enable setting ---------------------------------- 531.It Va ipnat_enable 532.Pq Vt bool 533Set to 534.Dq Li NO 535by default. 536Set it to 537.Dq Li YES 538to enable 539.Xr ipnat 8 540network address translation. 541See 542.Va ipfilter_enable 543for a detailed discussion. 544.\" ----- ipnat_program setting --------------------------------- 545.It Va ipnat_program 546.Pq Vt str 547Path to 548.Xr ipnat 8 549(default 550.Pa /sbin/ipnat ) . 551.\" ----- ipnat_rules setting ----------------------------------- 552.It Va ipnat_rules 553.Pq Vt str 554Set to 555.Pa /etc/ipnat.rules 556by default. 557This variable contains the name of the file 558holding the network address translation definition. 559This file is expected to be readable for the 560.Xr ipnat 8 561command to execute. 562.\" ----- ipnat_flags setting ----------------------------------- 563.It Va ipnat_flags 564.Pq Vt str 565Empty by default. 566This variable contains flags passed to the 567.Xr ipnat 8 568program. 569.\" ----- ipmon_enable setting ---------------------------------- 570.It Va ipmon_enable 571.Pq Vt bool 572Set to 573.Dq Li NO 574by default. 575Set it to 576.Dq Li YES 577to enable 578.Xr ipmon 8 579monitoring (logging 580.Xr ipf 8 581and 582.Xr ipnat 8 583events). 584Setting this variable needs setting 585.Va ipfilter_enable 586or 587.Va ipnat_enable 588too. 589See 590.Va ipfilter_enable 591for a detailed discussion. 592.\" ----- ipmon_program setting --------------------------------- 593.It Va ipmon_program 594.Pq Vt str 595Path to 596.Xr ipmon 8 597(default 598.Pa /sbin/ipmon ) . 599.\" ----- ipmon_flags setting ----------------------------------- 600.It Va ipmon_flags 601.Pq Vt str 602Set to 603.Dq Li -Ds 604by default. 605This variable contains flags passed to the 606.Xr ipmon 8 607program. 608Another typical example would be 609.Dq Fl D Pa /var/log/ipflog 610to have 611.Xr ipmon 8 612log directly to a file bypassing 613.Xr syslogd 8 . 614Make sure to adjust 615.Pa /etc/newsyslog.conf 616in such case like this: 617.Bd -literal 618/var/log/ipflog 640 10 100 * Z /var/run/ipmon.pid 619.Ed 620.\" ----- ipfs_enable setting ----------------------------------- 621.It Va ipfs_enable 622.Pq Vt bool 623Set to 624.Dq Li NO 625by default. 626Set it to 627.Dq Li YES 628to enable 629.Xr ipfs 8 630saving the filter and NAT state tables during shutdown 631and reloading them during startup again. 632Setting this variable needs setting 633.Va ipfilter_enable 634or 635.Va ipnat_enable 636to 637.Dq Li YES 638too. 639See 640.Va ipfilter_enable 641for a detailed discussion. 642Note that if 643.Va kern_securelevel 644is set to 3, 645.Va ipfs_enable 646cannot be used because the raised securelevel will prevent 647.Xr ipfs 8 648from saving the state tables at shutdown time. 649.\" ----- ipfs_program setting ---------------------------------- 650.It Va ipfs_program 651.Pq Vt str 652Path to 653.Xr ipfs 8 654(default 655.Pa /sbin/ipfs ) . 656.\" ----- ipfs_flags setting ------------------------------------ 657.It Va ipfs_flags 658.Pq Vt str 659Empty by default. 660This variable contains flags passed to the 661.Xr ipfs 8 662program. 663.\" ----- end of added ipf hook --------------------------------- 664.It Va tcp_extensions 665.Pq Vt bool 666Set to 667.Dq Li YES 668by default. 669Setting this to 670.Dq Li NO 671disables certain TCP options as described by 672.Rs 673.%T "RFC 1323" 674.Re 675Setting this to 676.Dq Li NO 677might help remedy such problems with connections as randomly hanging 678or other weird behavior. 679Some network devices are known to be broken with respect to these options. 680.It Va log_in_vain 681.Pq Vt int 682Set to 0 by default. 683The 684.Xr sysctl 8 685variables, 686.Va net.inet.tcp.log_in_vain 687and 688.Va net.inet.udp.log_in_vain , 689as described in 690.Xr tcp 4 691and 692.Xr udp 4 , 693are set to the given value. 694.It Va tcp_keepalive 695.Pq Vt bool 696Set to 697.Dq Li YES 698by default. 699Setting to 700.Dq Li NO 701will disable probing idle TCP connections to verify that the 702peer is still up and reachable. 703.It Va tcp_drop_synfin 704.Pq Vt bool 705Set to 706.Dq Li NO 707by default. 708Setting to 709.Dq Li YES 710will cause the kernel to ignore TCP frames that have both 711the SYN and FIN flags set. 712This prevents OS fingerprinting, but may break some legitimate applications. 713This option is only available if the kernel was built with the 714.Dv TCP_DROP_SYNFIN 715option. 716.It Va icmp_drop_redirect 717.Pq Vt bool 718Set to 719.Dq Li NO 720by default. 721Setting to 722.Dq Li YES 723will cause the kernel to ignore ICMP REDIRECT packets. 724Refer to 725.Xr icmp 4 726for more information. 727.It Va icmp_log_redirect 728.Pq Vt bool 729Set to 730.Dq Li NO 731by default. 732Setting to 733.Dq Li YES 734will cause the kernel to log ICMP REDIRECT packets. 735Note that 736the log messages are not rate-limited, so this option should only be used 737for troubleshooting networks. 738Refer to 739.Xr icmp 4 740for more information. 741.It Va icmp_bmcastecho 742.Pq Vt bool 743Set to 744.Dq Li YES 745to respond to broadcast or multicast ICMP ping packets. 746Refer to 747.Xr icmp 4 748for more information. 749.It Va ip_portrange_first 750.Pq Vt int 751If not set to 752.Dq Li NO , 753this is the first port in the default portrange. 754Refer to 755.Xr ip 4 756for more information. 757.It Va ip_portrange_last 758.Pq Vt int 759If not set to 760.Dq Li NO , 761this is the last port in the default portrange. 762Refer to 763.Xr ip 4 764for more information. 765.It Va network_interfaces 766.Pq Vt str 767Set to the list of network interfaces to configure on this host. 768For example, if the only network devices in the system are the loopback device 769.Pq Li lo0 770and a NIC using the 771.Xr ed 4 772driver, this could be set to 773.Dq Li "lo0 ed0" . 774An 775.Va ifconfig_ Ns Aq Ar interface 776variable is also assumed to exist for each value of 777.Ar interface . 778It is also possible to add IP alias entries here in cases where 779multiple IP addresses registered against a single interface are desired. 780Assuming that the interface in question was 781.Li ed0 , 782it might look something like this: 783.Bd -literal 784ifconfig_ed0_alias0="inet 127.0.0.253 netmask 0xffffffff" 785ifconfig_ed0_alias1="inet 127.0.0.254 netmask 0xffffffff" 786.Ed 787.Pp 788And so on. 789For each 790.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 791entry that is found, its contents are passed to 792.Xr ifconfig 8 . 793Execution stops at the first unsuccessful access, so if 794something like this is present: 795.Bd -literal 796ifconfig_ed0_alias0="inet 127.0.0.251 netmask 0xffffffff" 797ifconfig_ed0_alias1="inet 127.0.0.252 netmask 0xffffffff" 798ifconfig_ed0_alias2="inet 127.0.0.253 netmask 0xffffffff" 799ifconfig_ed0_alias4="inet 127.0.0.254 netmask 0xffffffff" 800.Ed 801.Pp 802Then note that alias4 would 803.Em not 804be added since the search would stop with the missing alias3 entry. 805.Pp 806If the 807.Pa /etc/start_if. Ns Aq Ar interface 808file is present, it is read and executed by the 809.Xr sh 1 810interpreter before configuring the interface as specified in the 811.Va ifconfig_ Ns Aq Ar interface 812and 813.Va ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n 814variables. 815.Pp 816It is possible to bring up an interface with DHCP by adding 817.Dq Li DHCP 818to the 819.Va ifconfig_ Ns Aq Ar interface 820variable. 821For instance, to initialize the 822.Li ed0 823device via DHCP, it is possible to use something like: 824.Bd -literal 825ifconfig_ed0="DHCP" 826.Ed 827.Pp 828Also, if your interface needs WPA authentication, it is possible to add 829.Dq Li WPA 830to the 831.Va ifconfig_ Ns Aq Ar interface 832variable. 833.Pp 834Finally, you can add 835.Xr ifconfig 8 836options in this variable, in addition to the 837.Pa /etc/start_if. Ns Aq Ar interface 838file. 839For instance, to initialize the 840.Li wi0 841device via DHCP, using WPA authentication and 802.11b mode, it is 842possible to use something like: 843.Bd -literal 844ifconfig_wi0="up DHCP WPA mode 11b" 845.Ed 846.Pp 847It is also possible to rename interface by doing: 848.Bd -literal 849ifconfig_ed0_name="net0" 850ifconfig_net0="inet 10.0.0.1 netmask 0xffff0000" 851.Ed 852.It Va ipv6_network_interfaces 853.Pq Vt str 854This is the IPv6 equivalent of 855.Va network_interfaces . 856Instead of setting the ifconfig variables as 857.Va ifconfig_ Ns Aq Ar interface 858they should be set as 859.Va ipv6_ifconfig_ Ns Aq Ar interface . 860Aliases should be set as 861.Va ipv6_ifconfig_ Ns Ao Ar interface Ac Ns Va _alias Ns Aq Ar n . 862.Va ipv6_prefix_ Ns Aq Ar interface 863does something. 864Interfaces that do not have a 865.Va ipv6_ifconfig_ Ns Aq Ar interface 866setting will be auto configured by 867.Xr rtsol 8 868if the 869.Va ipv6_gateway_enable 870is set to 871.Dq Li NO . 872Note that the IPv6 networking code does not support the 873.Pa /etc/start_if. Ns Aq Ar interface 874files. 875.It Va ipv6_default_interface 876.Pq Vt str 877If not set to 878.Dq Li NO , 879this is the default output interface for scoped addresses. 880Now this works only for IPv6 link local multicast addresses. 881.It Va cloned_interfaces 882.Pq Vt str 883Set to the list of clonable network interfaces to create on this host. 884Entries in 885.Va cloned_interfaces 886are automatically appended to 887.Va network_interfaces 888for configuration. 889.It Va gif_interfaces 890.Pq Vt str 891Set to the list of 892.Xr gif 4 893tunnel interfaces to configure on this host. 894A 895.Va gifconfig_ Ns Aq Ar interface 896variable is assumed to exist for each value of 897.Ar interface . 898The value of this variable is used to configure the link layer of the 899tunnel according to the syntax of the 900.Cm tunnel 901option to 902.Xr ifconfig 8 . 903Additionally, this option ensures that each listed interface is created via the 904.Cm create 905option to 906.Xr ifconfig 8 907before attempting to configure it. 908.It Va sppp_interfaces 909.Pq Vt str 910Set to the list of 911.Xr sppp 4 912interfaces to configure on this host. 913A 914.Va spppconfig_ Ns Aq Ar interface 915variable is assumed to exist for each value of 916.Ar interface . 917Each interface should also be configured by a general 918.Va ifconfig_ Ns Aq Ar interface 919setting. 920Refer to 921.Xr spppcontrol 8 922for more information about available options. 923.It Va ppp_enable 924.Pq Vt bool 925If set to 926.Dq Li YES , 927run the 928.Xr ppp 8 929daemon. 930.It Va ppp_mode 931.Pq Vt str 932Mode in which to run the 933.Xr ppp 8 934daemon. 935Accepted modes are 936.Dq Li auto , 937.Dq Li ddial , 938.Dq Li direct 939and 940.Dq Li dedicated . 941See the manual for a full description. 942.It Va ppp_nat 943.Pq Vt bool 944If set to 945.Dq Li YES , 946enables network address translation. 947Used in conjunction with 948.Va gateway_enable 949allows hosts on private network addresses access to the Internet using 950this host as a network address translating router. 951.It Va ppp_profile 952.Pq Vt str 953The name of the profile to use from 954.Pa /etc/ppp/ppp.conf . 955.It Va ppp_user 956.Pq Vt str 957The name of the user under which 958.Xr ppp 8 959should be started. 960By default, 961.Xr ppp 8 962is started as 963.Dq Li root . 964.It Va rc_conf_files 965.Pq Vt str 966This option is used to specify a list of files that will override 967the settings in 968.Pa /etc/defaults/rc.conf . 969The files will be read in the order in which they are specified and should 970include the full path to the file. 971By default, the files specified are 972.Pa /etc/rc.conf 973and 974.Pa /etc/rc.conf.local 975.It Va fsck_y_enable 976.Pq Vt bool 977If set to 978.Dq Li YES , 979.Xr fsck 8 980will be run with the 981.Fl y 982flag if the initial preen of the file systems fails. 983.It Va netfs_types 984.Pq Vt str 985List of file system types that are network-based. 986This list should generally not be modified by end users. 987Use 988.Va extra_netfs_types 989instead. 990.It Va extra_netfs_types 991.Pq Vt str 992If set to something other than 993.Dq Li NO 994(the default), this variable extends the list of file system types 995for which automatic mounting at startup by 996.Xr rc 8 997should be delayed until the network is initialized. 998It should contain 999a whitespace-separated list of network file system descriptor pairs, 1000each consisting of a file system type as passed to 1001.Xr mount 8 1002and a human-readable, one-word description, joined with a colon 1003.Pq Ql \&: . 1004Extending the default list in this way is only necessary 1005when third party file system types are used. 1006.It Va syslogd_enable 1007.Pq Vt bool 1008If set to 1009.Dq Li YES , 1010run the 1011.Xr syslogd 8 1012daemon. 1013.It Va syslogd_program 1014.Pq Vt str 1015Path to 1016.Xr syslogd 8 1017(default 1018.Pa /usr/sbin/syslogd ) . 1019.It Va syslogd_flags 1020.Pq Vt str 1021If 1022.Va syslogd_enable 1023is set to 1024.Dq Li YES , 1025these are the flags to pass to 1026.Xr syslogd 8 . 1027.It Va inetd_enable 1028.Pq Vt bool 1029If set to 1030.Dq Li YES , 1031run the 1032.Xr inetd 8 1033daemon. 1034.It Va inetd_program 1035.Pq Vt str 1036Path to 1037.Xr inetd 8 1038(default 1039.Pa /usr/sbin/inetd ) . 1040.It Va inetd_flags 1041.Pq Vt str 1042If 1043.Va inetd_enable 1044is set to 1045.Dq Li YES , 1046these are the flags to pass to 1047.Xr inetd 8 . 1048.It Va named_enable 1049.Pq Vt bool 1050If set to 1051.Dq Li YES , 1052run the 1053.Xr named 8 1054daemon. 1055.It Va named_program 1056.Pq Vt str 1057Path to 1058.Xr named 8 1059(default 1060.Pa /usr/sbin/named ) . 1061.It Va named_flags 1062.Pq Vt str 1063If 1064.Va named_enable 1065is set to 1066.Dq Li YES , 1067these are the flags to pass to 1068.Xr named 8 . 1069.It Va named_pidfile 1070.Pq Vt str 1071This is the default path to the 1072.Xr named 8 1073daemon's PID file. 1074Change it if you change the location in 1075.Pa /etc/namedb/named.conf . 1076.It Va named_chrootdir 1077.Pq Vt str 1078The root directory for a name server run in a 1079.Xr chroot 8 1080environment. 1081If left empty 1082.Xr named 8 1083will not be run in a 1084.Xr chroot 8 1085environment. 1086.It Va kerberos5_server_enable 1087.Pq Vt bool 1088Set to 1089.Dq Li YES 1090to start a Kerberos 5 authentication server at boot time. 1091.It Va kerberos5_server_program 1092.Pq Vt str 1093If 1094.Va kerberos5_server_enable 1095is set to 1096.Dq Li YES 1097this is the path to Kerberos 5 Authentication Server. 1098.It Va kadmind5_server_enable 1099.Pq Vt bool 1100Set to 1101.Dq Li YES 1102to start 1103.Xr kadmind 8 , 1104the Kerberos 5 Administration Daemon; set to 1105.Dq Li NO 1106on a slave server. 1107.It Va kadmind5_server_program 1108.Pq Vt str 1109If 1110.Va kadmind5_server_enable 1111is set to 1112.Dq Li YES 1113this is the path to Kerberos 5 Administration Daemon. 1114.It Va kpasswdd_server_enable 1115.Pq Vt bool 1116Set to 1117.Dq Li YES 1118to start 1119.Xr kpasswdd 8 , 1120the Kerberos 5 Password-Changing Daemon; set to 1121.Dq Li NO 1122on a slave server. 1123.It Va kpasswdd_server_program 1124.Pq Vt str 1125If 1126.Va kpasswdd_server_enable 1127is set to 1128.Dq Li YES 1129this is the path to Kerberos 5 Password-Changing Daemon. 1130.It Va rwhod_enable 1131.Pq Vt bool 1132If set to 1133.Dq Li YES , 1134run the 1135.Xr rwhod 8 1136daemon at boot time. 1137.It Va rwhod_flags 1138.Pq Vt str 1139If 1140.Va rwhod_enable 1141is set to 1142.Dq Li YES , 1143these are the flags to pass to it. 1144.It Va amd_enable 1145.Pq Vt bool 1146If set to 1147.Dq Li YES , 1148run the 1149.Xr amd 8 1150daemon at boot time. 1151.It Va amd_flags 1152.Pq Vt str 1153If 1154.Va amd_enable 1155is set to 1156.Dq Li YES , 1157these are the flags to pass to it. 1158See the 1159.Xr amd 8 1160manpage for more information. 1161.It Va amd_map_program 1162.Pq Vt str 1163If set, the specified program is run to get the list of 1164.Xr amd 8 1165maps. 1166For example, if the 1167.Xr amd 8 1168maps are stored in NIS, one can set this to run 1169.Xr ypcat 1 1170to get a list of 1171.Xr amd 8 1172maps from the 1173.Pa amd.master 1174NIS map. 1175.It Va update_motd 1176.Pq Vt bool 1177If set to 1178.Dq Li YES , 1179.Pa /etc/motd 1180will be updated at boot time to reflect the kernel release being run. 1181If set to 1182.Dq Li NO , 1183.Pa /etc/motd 1184will not be updated. 1185.It Va nfs_client_enable 1186.Pq Vt bool 1187If set to 1188.Dq Li YES , 1189run the NFS client daemons at boot time. 1190.It Va nfs_client_flags 1191.Pq Vt str 1192If 1193.Va nfs_client_enable 1194is set to 1195.Dq Li YES , 1196these are the flags to pass to the 1197.Xr nfsiod 8 1198daemon. 1199.It Va nfs_access_cache 1200.Pq Vt int 1201If 1202.Va nfs_client_enable 1203is set to 1204.Dq Li YES , 1205this can be set to 1206.Dq Li 0 1207to disable NFS ACCESS RPC caching, or to the number of seconds for which 1208NFS ACCESS results should be cached. 1209A value of 2-10 seconds will substantially reduce network traffic for 1210many NFS operations. 1211The default is 5 seconds. 1212Note that the attribute cache holds stat information only. 1213The NFS data cache is independent of the attribute cache and is only 1214invalidated when the client detects that the server has modified the 1215underlying file. 1216This value specifies a maximum timeout. 1217The NFS client will automatically use a shorter timeout for files which 1218have been recently modified. 1219.It Va nfs_neg_cache 1220.Pq Vt int 1221If 1222.Va nfs_client_enable 1223is set to 1224.Dq Li YES , 1225this can be set to 1226.Dq Li 0 1227to disable the caching of NEGATIVE LOOKUPS (lookups of non-existent 1228filenames), or to the number of seconds for which negative lookups should 1229be cached. 1230A value of 2-10 seconds will substantially reduce network 1231traffic for many NFS operations, especially source code builds. 1232The default is 3 seconds. 1233.It Va nfs_server_enable 1234.Pq Vt bool 1235If set to 1236.Dq Li YES , 1237run the NFS server daemons at boot time. 1238.It Va nfs_server_flags 1239.Pq Vt str 1240If 1241.Va nfs_server_enable 1242is set to 1243.Dq Li YES , 1244these are the flags to pass to the 1245.Xr nfsd 8 1246daemon. 1247.It Va mountd_enable 1248.Pq Vt bool 1249If set to 1250.Dq Li YES , 1251and no 1252.Va nfs_server_enable 1253is set, start 1254.Xr mountd 8 , 1255but not 1256.Xr nfsd 8 1257daemon. 1258It is commonly needed to run CFS without real NFS used. 1259.It Va mountd_flags 1260.Pq Vt str 1261If 1262.Va mountd_enable 1263is set to 1264.Dq Li YES , 1265these are the flags to pass to the 1266.Xr mountd 8 1267daemon. 1268.It Va weak_mountd_authentication 1269.Pq Vt bool 1270If set to 1271.Dq Li YES , 1272allow services like PCNFSD to make non-privileged mount requests. 1273.It Va nfs_reserved_port_only 1274.Pq Vt bool 1275If set to 1276.Dq Li YES , 1277provide NFS services only on a secure port. 1278.It Va nfs_bufpackets 1279.Pq Vt int 1280If set to a number, indicates the number of packets worth of 1281socket buffer space to reserve on an NFS client. 1282The kernel default is typically 4. 1283Using a higher number may be useful on gigabit networks to improve performance. 1284The minimum value is 2 and the maximum is 64. 1285.It Va rpc_umntall_enable 1286.Pq Vt bool 1287If set to 1288.Dq Li YES 1289(default) and we are also an NFS client, run 1290.Xr rpc.umntall 8 1291at boot time to clear out old mounts on remote servers. 1292If set to 1293.Dq Li NO 1294then 1295.Xr rpc.umntall 8 1296will not be run at boot time. 1297.It Va rpc_lockd_enable 1298.Pq Vt bool 1299If set to 1300.Dq Li YES 1301and also an NFS server, run 1302.Xr rpc.lockd 8 1303at boot time. 1304.It Va rpc_statd_enable 1305.Pq Vt bool 1306If set to 1307.Dq Li YES 1308and also an NFS server, run 1309.Xr rpc.statd 8 1310at boot time. 1311.It Va rpcbind_program 1312.Pq Vt str 1313Path to 1314.Xr rpcbind 8 1315(default 1316.Pa /usr/sbin/rpcbind ) . 1317.It Va rpcbind_enable 1318.Pq Vt bool 1319If set to 1320.Dq Li YES , 1321run the 1322.Xr rpcbind 8 1323service at boot time. 1324.It Va rpcbind_flags 1325.Pq Vt str 1326If 1327.Va rpcbind_enable 1328is set to 1329.Dq Li YES , 1330these are the flags to pass to the 1331.Xr rpcbind 8 1332daemon. 1333.It Va keyserv_enable 1334.Pq Vt bool 1335If set to 1336.Dq Li YES , 1337run the 1338.Xr keyserv 8 1339daemon on boot for running Secure RPC. 1340.It Va keyserv_flags 1341.Pq Vt str 1342If 1343.Va keyserv_enable 1344is set to 1345.Dq Li YES , 1346these are the flags to pass to 1347.Xr keyserv 8 1348daemon. 1349.It Va pppoed_enable 1350.Pq Vt bool 1351If set to 1352.Dq Li YES , 1353run the 1354.Xr pppoed 8 1355daemon at boot time to provide PPP over Ethernet services. 1356.It Va pppoed_provider 1357.Pq Vt str 1358.Xr pppoed 8 1359listens to requests to this provider and ultimately runs 1360.Xr ppp 8 1361with a 1362.Ar system 1363argument of the same name. 1364.It Va pppoed_flags 1365.Pq Vt str 1366Additional flags to pass to 1367.Xr pppoed 8 . 1368.It Va pppoed_interface 1369.Pq Vt str 1370The network interface to run 1371.Xr pppoed 8 1372on. 1373This is mandatory when 1374.Va pppoed_enable 1375is set to 1376.Dq Li YES . 1377.It Va timed_enable 1378.Pq Vt bool 1379If set to 1380.Dq Li YES , 1381run the 1382.Xr timed 8 1383service at boot time. 1384This command is intended for networks of machines where a consistent 1385.Dq "network time" 1386for all hosts must be established. 1387This is often useful in large NFS environments where time stamps on 1388files are expected to be consistent network-wide. 1389.It Va timed_flags 1390.Pq Vt str 1391If 1392.Va timed_enable 1393is set to 1394.Dq Li YES , 1395these are the flags to pass to the 1396.Xr timed 8 1397service. 1398.It Va ntpd_enable 1399.Pq Vt bool 1400If set to 1401.Dq Li YES , 1402run the 1403.Xr ntpd 8 1404command at boot time. 1405.It Va ntpd_program 1406.Pq Vt str 1407Path to 1408.Xr ntpd 8 1409(default 1410.Pa /usr/sbin/ntpd ) . 1411.It Va ntpd_flags 1412.Pq Vt str 1413If 1414.Va ntpd_enable 1415is set to 1416.Dq Li YES , 1417these are the flags to pass to the 1418.Xr ntpd 8 1419daemon. 1420Set to 1421.Dq Li -s 1422by default which sets the time immediately at startup if the 1423local clock is off by more than 180 seconds. 1424To prevent 1425.Xr ntpd 8 1426from doing this, set 1427.Va ntpd_flags 1428to 1429.Dq Li -S . 1430.It Va dntpd_enable 1431.Pq Vt bool 1432If set to 1433.Dq Li YES , 1434run 1435.Xr dntpd 8 1436at system boot time. 1437.It Va dntpd_program 1438.Pq Vt str 1439Path to 1440.Xr dntpd 8 1441(default 1442.Pa /usr/sbin/dntpd ) . 1443.It Va dntpd_flags 1444.Pq Vt str 1445If 1446.Va dntpd_enable 1447is set to 1448.Dq Li YES , 1449these are the flags to pass to the 1450.Xr dntpd 8 1451daemon. 1452.It Va nis_client_enable 1453.Pq Vt bool 1454If set to 1455.Dq Li YES , 1456run the 1457.Xr ypbind 8 1458service at system boot time. 1459.It Va nis_client_flags 1460.Pq Vt str 1461If 1462.Va nis_client_enable 1463is set to 1464.Dq Li YES , 1465these are the flags to pass to the 1466.Xr ypbind 8 1467service. 1468.It Va nis_ypset_enable 1469.Pq Vt bool 1470If set to 1471.Dq Li YES , 1472run the 1473.Xr ypset 8 1474daemon at system boot time. 1475.It Va nis_ypset_flags 1476.Pq Vt str 1477If 1478.Va nis_ypset_enable 1479is set to 1480.Dq Li YES , 1481these are the flags to pass to the 1482.Xr ypset 8 1483daemon. 1484.It Va nis_server_enable 1485.Pq Vt bool 1486If set to 1487.Dq Li YES , 1488run the 1489.Xr ypserv 8 1490daemon at system boot time. 1491.It Va nis_server_flags 1492.Pq Vt str 1493If 1494.Va nis_server_enable 1495is set to 1496.Dq Li YES , 1497these are the flags to pass to the 1498.Xr ypserv 8 1499daemon. 1500.It Va nis_ypxfrd_enable 1501.Pq Vt bool 1502If set to 1503.Dq Li YES , 1504run the 1505.Xr rpc.ypxfrd 8 1506daemon at system boot time. 1507.It Va nis_ypxfrd_flags 1508.Pq Vt str 1509If 1510.Va nis_ypxfrd_enable 1511is set to 1512.Dq Li YES , 1513these are the flags to pass to the 1514.Xr rpc.ypxfrd 8 1515daemon. 1516.It Va nis_yppasswdd_enable 1517.Pq Vt bool 1518If set to 1519.Dq Li YES , 1520run the 1521.Xr rpc.yppasswdd 8 1522daemon at system boot time. 1523.It Va nis_yppasswdd_flags 1524.Pq Vt str 1525If 1526.Va nis_yppasswdd_enable 1527is set to 1528.Dq Li YES , 1529these are the flags to pass to the 1530.Xr rpc.yppasswdd 8 1531daemon. 1532.It Va rpc_ypupdated_enable 1533.Pq Vt bool 1534If set to 1535.Dq Li YES , 1536run the 1537.Nm rpc.ypupdated 1538daemon at system boot time. 1539.It Va defaultrouter 1540.Pq Vt str 1541If not set to 1542.Dq Li NO , 1543create a default route to this host name or IP address 1544(use an IP address if this router is also required to get to the 1545name server!). 1546.It Va ipv6_defaultrouter 1547.Pq Vt str 1548The IPv6 equivalent of 1549.Va defaultrouter . 1550.It Va static_routes 1551.Pq Vt str 1552Set to the list of static routes that are to be added at system boot time. 1553If not set to 1554.Dq Li NO 1555then for each whitespace separated 1556.Ar element 1557in the value, a 1558.Va route_ Ns Aq Ar element 1559variable is assumed to exist whose contents will later be passed to a 1560.Dq Nm route Cm add 1561operation. 1562.It Va ipv6_static_routes 1563.Pq Vt str 1564The IPv6 equivalent of 1565.Va static_routes . 1566If not set to 1567.Dq Li NO 1568then for each whitespace separated 1569.Ar element 1570in the value, a 1571.Va ipv6_route_ Ns Aq Ar element 1572variable is assumed to exist whose contents will later be passed to a 1573.Dq Nm route Cm add Fl inet6 1574operation. 1575.It Va gateway_enable 1576.Pq Vt bool 1577If set to 1578.Dq Li YES , 1579configure host to act as an IP router, e.g. to forward packets 1580between interfaces. 1581.It Va ipv6_gateway_enable 1582.Pq Vt bool 1583The IPv6 equivalent of 1584.Va gateway_enable . 1585.It Va router_enable 1586.Pq Vt bool 1587If set to 1588.Dq Li YES , 1589run a routing daemon of some sort, based on the settings of 1590.Va router_program 1591and 1592.Va router_flags . 1593.It Va ipv6_router_enable 1594.Pq Vt bool 1595The IPv6 equivalent of 1596.Va router_enable . 1597If set to 1598.Dq Li YES , 1599run a routing daemon of some sort, based on the settings of 1600.Va ipv6_router_program 1601and 1602.Va ipv6_router_flags . 1603.It Va router_program 1604.Pq Vt str 1605If 1606.Va router_enable 1607is set to 1608.Dq Li YES , 1609this is the name of the routing daemon to use. 1610.It Va ipv6_router_program 1611.Pq Vt str 1612The IPv6 equivalent of 1613.Va router_program . 1614.It Va router_flags 1615.Pq Vt str 1616If 1617.Va router_enable 1618is set to 1619.Dq Li YES , 1620these are the flags to pass to the routing daemon. 1621.It Va ipv6_router_flags 1622.Pq Vt str 1623The IPv6 equivalent of 1624.Va router_flags . 1625.It Va mrouted_enable 1626.Pq Vt bool 1627If set to 1628.Dq Li YES , 1629run the multicast routing daemon, 1630.Xr mrouted 8 . 1631.It Va mroute6d_enable 1632.Pq Vt bool 1633The IPv6 equivalent of 1634.Va mrouted_enable . 1635If set to 1636.Dq Li YES , 1637run the IPv6 multicast routing daemon. 1638Note that no IPv6 multicast routing daemon is included in the 1639.Dx 1640base system but 1641.Xr pim6dd 8 1642can be installed from the 1643.Xr pkgsrc 7 1644collection. 1645.It Va mrouted_flags 1646.Pq Vt str 1647If 1648.Va mrouted_enable 1649is set to 1650.Dq Li YES , 1651these are the flags to pass to the 1652.Xr mrouted 8 1653daemon. 1654.It Va mroute6d_flags 1655.Pq Vt str 1656The IPv6 equivalent of 1657.Va mrouted_flags . 1658If 1659.Va mroute6d_enable 1660is set to 1661.Dq Li YES , 1662these are the flags passed to the IPv6 multicast routing daemon. 1663.It Va mroute6d_program 1664.Pq Vt str 1665If 1666.Va mroute6d_enable 1667is set to 1668.Dq Li YES , 1669this is the path to the IPv6 multicast routing daemon. 1670.It Va rtadvd_enable 1671.Pq Vt bool 1672If set to 1673.Dq Li YES , 1674run the 1675.Xr rtadvd 8 1676daemon at boot time. 1677.Xr rtadvd 8 1678will only run if 1679.Va ipv6_gateway_enable 1680is also set to 1681.Dq Li YES . 1682The 1683.Xr rtadvd 8 1684utility sends router advertisement packets to the interfaces specified in 1685.Va rtadvd_interfaces . 1686.Xr rtadvd 8 1687and should only be enabled with great care. 1688You may want to fine-tune 1689.Xr rtadvd.conf 5 . 1690.It Va rtadvd_interfaces 1691.Pq Vt str 1692If 1693.Va rtadvd_enable 1694is set to 1695.Dq Li YES 1696this is the list of interfaces to use. 1697.It Va rtsold_enable 1698.Pq Vt bool 1699If set to 1700.Dq Li YES , 1701run the 1702.Xr rtsold 8 1703daemon at boot time. 1704The 1705.Xr rtsold 8 1706daemon is used for automatic discovery of non-link local addresses. 1707.It Va rtsold_flags 1708.Pq Vt str 1709If 1710.Va rtsold_enable 1711is set to 1712.Dq Li YES , 1713these are the flags to pass to the 1714.Xr rtsold 8 1715daemon. 1716.It Va ipxgateway_enable 1717.Pq Vt bool 1718If set to 1719.Dq Li YES , 1720enable the routing of IPX traffic. 1721.It Va ipxrouted_enable 1722.Pq Vt bool 1723If set to 1724.Dq Li YES , 1725run the 1726.Xr IPXrouted 8 1727daemon at system boot time. 1728.It Va ipxrouted_flags 1729.Pq Vt str 1730If 1731.Va ipxrouted_enable 1732is set to 1733.Dq Li YES , 1734these are the flags to pass to the 1735.Xr IPXrouted 8 1736daemon. 1737.It Va arpproxy_all 1738.Pq Vt bool 1739If set to 1740.Dq Li YES , 1741enable global proxy ARP. 1742.It Va forward_sourceroute 1743.Pq Vt bool 1744If set to 1745.Dq Li YES 1746and 1747.Va gateway_enable 1748is also set to 1749.Dq Li YES , 1750source-routed packets are forwarded. 1751.It Va accept_sourceroute 1752.Pq Vt bool 1753If set to 1754.Dq Li YES , 1755the system will accept source-routed packets directed at it. 1756.It Va rarpd_enable 1757.Pq Vt bool 1758If set to 1759.Dq Li YES , 1760run the 1761.Xr rarpd 8 1762daemon at system boot time. 1763.It Va rarpd_flags 1764.Pq Vt str 1765If 1766.Va rarpd_enable 1767is set to 1768.Dq Li YES , 1769these are the flags to pass to the 1770.Xr rarpd 8 1771daemon. 1772.It Va bootparamd_enable 1773.Pq Vt bool 1774If set to 1775.Dq Li YES , 1776run the 1777.Xr bootparamd 8 1778daemon at system boot time. 1779.It Va bootparamd_flags 1780.Pq Vt str 1781If 1782.Va bootparamd_enable 1783is set to 1784.Dq Li YES , 1785these are the flags to pass to the 1786.Xr bootparamd 8 1787daemon. 1788.It Va stf_interface_ipv4addr 1789.Pq Vt str 1790If not set to 1791.Dq Li NO , 1792this is the local IPv4 address for 6to4 (IPv6 over IPv4 tunneling interface). 1793Specify this entry to enable the 6to4 interface. 1794.It Va stf_interface_ipv4plen 1795.Pq Vt int 1796Prefix length for 6to4 IPv4 addresses, to limit peer address range. 1797An effective value is 0-31. 1798.It Va stf_interface_ipv6_ifid 1799.Pq Vt str 1800IPv6 interface ID for 1801.Xr stf 4 . 1802This can be set to 1803.Dq Li AUTO . 1804.It Va stf_interface_ipv6_slaid 1805.Pq Vt str 1806IPv6 Site Level Aggregator for 1807.Xr stf 4 . 1808.It Va ipv6_faith_prefix 1809.Pq Vt str 1810If not set to 1811.Dq Li NO , 1812this is the faith prefix to enable a FAITH IPv6-to-IPv4 TCP translator. 1813You also need 1814.Xr faithd 8 1815setup. 1816.It Va ipv6_ipv4mapping 1817.Pq Vt bool 1818If set to 1819.Dq Li YES 1820this enables IPv4 mapped IPv6 address communication (like 1821.Li ::ffff:a.b.c.d ) . 1822.It Va atm_enable 1823.Pq Vt bool 1824Set to 1825.Dq Li YES 1826to enable the configuration of ATM interfaces at system boot time. 1827For all of the ATM variables described below, please refer to the 1828.Xr atm 8 1829man page for further details on the available command parameters. 1830Also refer to the files in 1831.Pa /usr/share/examples/atm 1832for more detailed configuration information. 1833.It Va atm_netif_ Ns Aq Ar intf 1834.Pq Vt str 1835For the ATM physical interface 1836.Ar intf , 1837this variable defines the name prefix and count for the ATM network 1838interfaces to be created. 1839The value will be passed as the parameters of an 1840.Dq Nm atm Cm "set netif" Ar intf 1841command. 1842.It Va atm_sigmgr_ Ns Aq Ar intf 1843.Pq Vt str 1844For the ATM physical interface 1845.Ar intf , 1846this variable defines the ATM signalling manager to be used. 1847The value will be passed as the parameters of an 1848.Dq Nm atm Cm attach Ar intf 1849command. 1850.It Va atm_prefix_ Ns Aq Ar intf 1851.Pq Vt str 1852For the ATM physical interface 1853.Ar intf , 1854this variable defines the NSAP prefix for interfaces using a UNI signalling 1855manager. 1856If set to 1857.Dq Li ILMI , 1858the prefix will automatically be set via the 1859.Xr ilmid 8 1860daemon. 1861Otherwise, the value will be passed as the parameters of an 1862.Dq Nm atm Cm "set prefix" Ar intf 1863command. 1864.It Va atm_macaddr_ Ns Aq Ar intf 1865.Pq Vt str 1866For the ATM physical interface 1867.Ar intf , 1868this variable defines the MAC address for interfaces using a UNI signalling 1869manager. 1870If set to 1871.Dq Li NO , 1872the hardware MAC address contained in the ATM interface card will be used. 1873Otherwise, the value will be passed as the parameters of an 1874.Dq Nm atm Cm "set mac" Ar intf 1875command. 1876.It Va atm_arpserver_ Ns Aq Ar netif 1877.Pq Vt str 1878For the ATM network interface 1879.Ar netif , 1880this variable defines the ATM address for a host which is to provide ATMARP 1881service. 1882This variable is only applicable to interfaces using a UNI signalling manager. 1883If set to 1884.Dq Li local , 1885this host will become an ATMARP server. 1886The value will be passed as the parameters of an 1887.Dq Nm atm Cm "set arpserver" Ar netif 1888command. 1889.It Va atm_scsparp_ Ns Aq Ar netif 1890.Pq Vt bool 1891If set to 1892.Dq Li YES , 1893SCSP/ATMARP service for the network interface 1894.Ar netif 1895will be initiated using the 1896.Xr scspd 8 1897and 1898.Xr atmarpd 8 1899daemons. 1900This variable is only applicable if 1901.Va atm_arpserver_ Ns Aq Ar netif 1902is set to 1903.Dq Li local . 1904.It Va atm_arps 1905.Pq Vt str 1906Set to the list of permanent ATM ARP entries to be added at system boot time. 1907For each whitespace separated 1908.Ar element 1909in the value, an 1910.Va atm_arp_ Ns Aq Ar element 1911variable is assumed to exist. 1912The value of each of these variables will be passed as the parameters of an 1913.Dq Nm atm Cm "add arp" 1914command. 1915.It Va keybell 1916.Pq Vt str 1917The keyboard bell sound. 1918Set to 1919.Dq Li normal , 1920.Dq Li visual , 1921.Dq Li off , 1922or 1923.Dq Li NO 1924if the default behavior is desired. 1925For details, refer to the 1926.Xr kbdcontrol 1 1927manpage. 1928.It Va keymap 1929.Pq Vt str 1930If set to 1931.Dq Li NO , 1932no keymap is installed, otherwise the value is used to install 1933the keymap file in 1934.Pa /usr/share/syscons/keymaps/ Ns Ao Ar value Ac Ns Pa .kbd . 1935.It Va keyrate 1936.Pq Vt str 1937The keyboard repeat speed. 1938Set to 1939.Dq Li slow , 1940.Dq Li normal , 1941.Dq Li fast , 1942or 1943.Dq Li NO 1944if the default behavior is desired. 1945.It Va keychange 1946.Pq Vt str 1947If not set to 1948.Dq Li NO , 1949attempt to program the function keys with the value. 1950The value should be a single string of the form: 1951.Dq Ar funkey_number new_value Op Ar funkey_number new_value ... . 1952.It Va cursor 1953.Pq Vt str 1954Can be set to the value of 1955.Dq Li normal , 1956.Dq Li blink , 1957.Dq Li destructive , 1958or 1959.Dq Li NO 1960to set the cursor behavior explicitly or choose the default behavior. 1961.It Va scrnmap 1962.Pq Vt str 1963If set to 1964.Dq Li NO , 1965no screen map is installed, otherwise the value is used to install 1966the screen map file in 1967.Pa /usr/share/syscons/scrnmaps/ Ns Aq Ar value . 1968.It Va font8x16 1969.Pq Vt str 1970If set to 1971.Dq Li NO , 1972the default 8x16 font value is used for screen size requests, otherwise 1973the value in 1974.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1975is used. 1976.It Va font8x14 1977.Pq Vt str 1978If set to 1979.Dq Li NO , 1980the default 8x14 font value is used for screen size requests, otherwise 1981the value in 1982.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1983is used. 1984.It Va font8x8 1985.Pq Vt str 1986If set to 1987.Dq Li NO , 1988the default 8x8 font value is used for screen size requests, otherwise 1989the value in 1990.Pa /usr/share/syscons/fonts/ Ns Aq Ar value 1991is used. 1992.It Va blanktime 1993.Pq Vt int 1994If set to 1995.Dq Li NO , 1996the default screen blanking interval is used, otherwise it is set to 1997.Ar value 1998seconds. 1999.It Va saver 2000.Pq Vt str 2001If not set to 2002.Dq Li NO , 2003this is the actual screen saver to use 2004.Li ( blank , snake , daemon , 2005etc). 2006.It Va moused_enable 2007.Pq Vt str 2008If set to 2009.Dq Li YES , 2010the 2011.Xr moused 8 2012daemon is started for doing cut/paste selection on the console. 2013.It Va moused_type 2014.Pq Vt str 2015This is the protocol type of the mouse connected to this host. 2016This variable must be set if 2017.Va moused_enable 2018is set to 2019.Dq Li YES . 2020The 2021.Xr moused 8 2022daemon 2023is able to detect the appropriate mouse type automatically in many cases. 2024Set this variable to 2025.Dq Li auto 2026to let the daemon detect it, or 2027select one from the following list if the automatic detection fails. 2028.Pp 2029If the mouse is attached to the PS/2 mouse port, choose 2030.Dq Li auto 2031or 2032.Dq Li ps/2 , 2033regardless of the brand and model of the mouse. 2034Likewise, if the mouse is attached to the bus mouse port, choose 2035.Dq Li auto 2036or 2037.Dq Li busmouse . 2038All other protocols are for serial mice and will not work with 2039the PS/2 and bus mice. 2040If this is a USB mouse, 2041.Dq Li auto 2042is the only protocol type which will work. 2043.Pp 2044.Bl -tag -width ".Li x10mouseremote" -compact 2045.It Li microsoft 2046Microsoft mouse (serial) 2047.It Li intellimouse 2048Microsoft IntelliMouse (serial) 2049.It Li mousesystems 2050Mouse systems Corp. mouse (serial) 2051.It Li mmseries 2052MM Series mouse (serial) 2053.It Li logitech 2054Logitech mouse (serial) 2055.It Li busmouse 2056A bus mouse 2057.It Li mouseman 2058Logitech MouseMan and TrackMan (serial) 2059.It Li glidepoint 2060ALPS GlidePoint (serial) 2061.It Li thinkingmouse 2062Kensington ThinkingMouse (serial) 2063.It Li ps/2 2064PS/2 mouse 2065.It Li mmhittab 2066MM HitTablet (serial) 2067.It Li x10mouseremote 2068X10 MouseRemote (serial) 2069.It Li versapad 2070Interlink VersaPad (serial) 2071.El 2072.Pp 2073Even if the mouse is not in the above list, it may be compatible 2074with one in the list. 2075Refer to the man page for 2076.Xr moused 8 2077for compatibility information. 2078.Pp 2079It should also be noted that while this is enabled, any 2080other client of the mouse (such as an X server) should access 2081the mouse through the virtual mouse device, 2082.Pa /dev/sysmouse , 2083and configure it as a 2084.Dq Li sysmouse 2085type mouse, since all 2086mouse data is converted to this single canonical format when using 2087.Xr moused 8 . 2088If the client program does not support the 2089.Dq Li sysmouse 2090type, specify the 2091.Dq Li mousesystems 2092type. 2093It is the second preferred type. 2094.It Va moused_port 2095.Pq Vt str 2096If 2097.Va moused_enable 2098is set to 2099.Dq Li YES , 2100this is the actual port the mouse is on. 2101It might be 2102.Pa /dev/cuaa0 2103for a COM1 serial mouse, 2104.Pa /dev/psm0 2105for a PS/2 mouse or 2106.Pa /dev/mse0 2107for a bus mouse, for example. 2108.It Va moused_flags 2109.Pq Vt str 2110If 2111.Va moused_type 2112is set, these are the additional flags to pass to the 2113.Xr moused 8 2114daemon. 2115.It Va mousechar_start 2116.Pq Vt int 2117If set to 2118.Dq Li NO , 2119the default mouse cursor character range 2120.Li 0xd0 Ns - Ns Li 0xd3 2121is used, otherwise the range start is set to 2122.Ar value 2123character, see 2124.Xr vidcontrol 1 . 2125Use if the default range is occupied in the language code table. 2126.It Va vidhistory 2127.Pq Vt int 2128Set the size of the history (scrollback) buffer in lines. 2129.It Va allscreens_flags 2130.Pq Vt str 2131If set, 2132.Xr vidcontrol 1 2133is run with these options for each of the virtual terminals 2134.Pq Pa /dev/ttyv* . 2135For example, 2136.Dq Fl m Cm on 2137will enable the mouse pointer on all virtual terminals if 2138.Va moused_enable 2139is set to 2140.Dq Li YES . 2141.It Va allscreens_kbdflags 2142.Pq Vt str 2143If set, 2144.Xr kbdcontrol 1 2145is run with these options for each of the virtual terminals 2146.Pq Pa /dev/ttyv* . 2147For example, 2148.Dq Fl h Li 200 2149will set the 2150.Xr syscons 4 2151scrollback (history) buffer to 200 lines. 2152.It Va cron_enable 2153.Pq Vt bool 2154If set to 2155.Dq Li YES , 2156run the 2157.Xr cron 8 2158daemon at system boot time. 2159.It Va cron_program 2160.Pq Vt str 2161Path to 2162.Xr cron 8 2163(default 2164.Pa /usr/sbin/cron ) . 2165.It Va cron_flags 2166.Pq Vt str 2167If 2168.Va cron_enable 2169is set to 2170.Dq Li YES , 2171these are the flags to pass to 2172.Xr cron 8 . 2173.It Va lpd_program 2174.Pq Vt str 2175Path to 2176.Xr lpd 8 2177(default 2178.Pa /usr/sbin/lpd ) . 2179.It Va lpd_enable 2180.Pq Vt bool 2181If set to 2182.Dq Li YES , 2183run the 2184.Xr lpd 8 2185daemon at system boot time. 2186.It Va lpd_flags 2187.Pq Vt str 2188If 2189.Va lpd_enable 2190is set to 2191.Dq Li YES , 2192these are the flags to pass to the 2193.Xr lpd 8 2194daemon. 2195.It Va mixer_enable 2196.Pq Vt bool 2197If set to 2198.Dq Li YES , 2199preserve 2200.Xr mixer 8 2201settings across reboots. 2202.It Va mta_start_script 2203.Pq Vt str 2204This variable specifies the full path to the script to run to start 2205a mail transfer agent. 2206The default is 2207.Pa /etc/rc.sendmail . 2208The 2209.Va sendmail_* 2210variables which 2211.Pa /etc/rc.sendmail 2212uses are documented in the 2213.Xr rc.sendmail 8 2214man page. 2215.It Va dumpdev 2216.Pq Vt str 2217Indicates the device (usually a swap partition) to which a crash dump 2218should be written in the event of a system crash. 2219The value of this variable is passed as the argument to 2220.Xr dumpon 8 . 2221To disable crash dumps, set this variable to 2222.Dq Li NO . 2223.It Va dumpdir 2224.Pq Vt str 2225When the system reboots after a crash and a crash dump is found on the 2226device specified by the 2227.Va dumpdev 2228variable, 2229.Xr savecore 8 2230will save that crash dump and a copy of the kernel to the directory 2231specified by the 2232.Va dumpdir 2233variable. 2234The default value is 2235.Pa /var/crash . 2236Set to 2237.Dq Li NO 2238to not run 2239.Xr savecore 8 2240at boot time when 2241.Va dumpdir 2242is set. 2243.It Va savecore_flags 2244.Pq Vt str 2245If crash dumps are enabled, these are the flags to pass to the 2246.Xr savecore 8 2247utility. 2248.It Va enable_quotas 2249.Pq Vt bool 2250Set to 2251.Dq Li YES 2252to turn on user disk quotas on system startup via the 2253.Xr quotaon 8 2254command. 2255.It Va check_quotas 2256.Pq Vt bool 2257Set to 2258.Dq Li YES 2259to enable user disk quota checking via the 2260.Xr quotacheck 8 2261command. 2262.It Va accounting_enable 2263.Pq Vt bool 2264Set to 2265.Dq Li YES 2266to enable system accounting through the 2267.Xr accton 8 2268facility. 2269.It Va linux_enable 2270.Pq Vt bool 2271Set to 2272.Dq Li YES 2273to enable Linux/ELF binary emulation at system initial boot time. 2274.It Va sysvipc_enable 2275.Pq Vt bool 2276If set to 2277.Dq Li YES , 2278load System V IPC primitives at boot time. 2279.\" ----- cleanvar_enable setting-------------------------------- 2280.It Va cleanvar_enable 2281.Pq Vt bool 2282Set to 2283.Dq Li YES 2284to have 2285.Pa /var/run , 2286.Pa /var/spool/lock 2287and 2288.Pa /var/spool/uucp/.Temp/* 2289cleaned at startup. 2290.\" ----- clear_tmp_enable setting------------------------------- 2291.It Va clear_tmp_enable 2292.Pq Vt bool 2293Set to 2294.Dq Li YES 2295to have 2296.Pa /tmp 2297cleaned at startup. 2298.\" ----- ldconfig_paths setting -------------------------------- 2299.It Va ldconfig_paths 2300.Pq Vt str 2301Set to the list of shared library paths to use with 2302.Xr ldconfig 8 . 2303NOTE: 2304.Pa /usr/lib 2305will always be added first, so it need not appear in this list. 2306.It Va ldconfig_insecure 2307.Pq Vt bool 2308The 2309.Xr ldconfig 8 2310utility normally refuses to use directories 2311which are writable by anyone except root. 2312Set this variable to 2313.Dq Li YES 2314to disable that security check during system startup. 2315.It Va kern_securelevel 2316.Pq Vt int 2317The kernel security level to set at startup. 2318The allowed range of 2319.Ar value 2320ranges from \-1 (the compile time default) to 3 (the most secure). 2321See 2322.Xr init 8 2323for the list of possible security levels and their effect on system operation. 2324.It Va start_vinum 2325.Pq Vt bool 2326Set to 2327.Dq Li YES 2328to start 2329.Xr vinum 8 2330at system boot time. 2331.It Va sshd_enable 2332.Pq Vt bool 2333Set to 2334.Dq Li YES 2335to start 2336.Xr sshd 8 2337at system boot time. 2338.It Va sshd_program 2339.Pq Vt str 2340Path to the SSH server program 2341.Pa ( /usr/sbin/sshd 2342is the default). 2343.It Va sshd_flags 2344.Pq Vt str 2345If 2346.Va sshd_enable 2347is set to 2348.Dq Li YES , 2349these are the flags to pass to the 2350.Xr sshd 8 2351daemon. 2352.It Va ftpd_enable 2353.Pq Vt bool 2354Set to 2355.Dq Li YES 2356to start 2357.Xr ftpd 8 2358at system boot time. 2359.It Va ftpd_flags 2360.Pq Vt str 2361If 2362.Va ftpd_enable 2363is set to 2364.Dq Li YES , 2365these are the flags to pass to the 2366.Xr ftpd 8 2367daemon. 2368.It Va usbd_enable 2369.Pq Vt bool 2370If set to 2371.Dq Li YES , 2372run the 2373.Xr usbd 8 2374daemon at boot time. 2375.It Va usbd_flags 2376.Pq Vt str 2377If 2378.Va usbd_enable 2379is set to 2380.Dq Li YES , 2381these are the flags passed to 2382.Xr usbd 8 2383daemon. 2384.It Va watchdogd_enable 2385.Pq Vt bool 2386If set to 2387.Dq Li YES , 2388start the 2389.Xr watchdogd 8 2390daemon at boot time. 2391This requires that the kernel have been compiled with 2392.Cd "options WATCHDOG" . 2393.It Va jail_enable 2394.Pq Vt bool 2395If set to 2396.Dq Li NO , 2397any configured jails will not be started. 2398.It Va jail_list 2399.Pq Vt str 2400A space separated list of names for jails. 2401This is purely a configuration aid to help identify and 2402configure multiple jails. 2403The names specified in this list will be used to 2404identify settings common to an instance of a jail. 2405Assuming that the jail in question was named 2406.Li vjail , 2407you would have the following dependent variables: 2408.Bd -literal 2409jail_vjail_hostname="jail.example.com" 2410jail_vjail_ip="192.168.1.100" 2411jail_vjail_rootdir="/var/jails/vjail/root" 2412jail_vjail_exec="/bin/sh /etc/rc" 2413.Ed 2414.Pp 2415The last one is optional. 2416It defaults to 2417.Pa /etc/rc 2418if it is not set. 2419.It Va jail_set_hostname_allow 2420.Pq Vt bool 2421If set to 2422.Dq Li NO , 2423do not allow the root user in a jail to set its hostname. 2424.It Va jail_socket_unixiproute_only 2425.Pq Vt bool 2426If set to 2427.Dq Li NO , 2428do not allow any protocol, besides TCP/IP, to be used within a jail. 2429.It Va jail_sysvipc_allow 2430.Pq Vt bool 2431If set to 2432.Dq Li YES , 2433allow applications within a jail to use System V IPC. 2434.It Va resident_enable 2435.Pq Vt bool 2436If set to 2437.Dq Li YES , 2438make the dynamic binaries listed in 2439.Pa /etc/resident.conf 2440resident. 2441.It Va varsym_enable 2442.Pq Vt bool 2443If set to 2444.Dq Li YES , 2445process 2446.Pa /etc/varsym.conf 2447to set system-wide variables for variant symlinks. 2448.It Va rand_irqs 2449.Pq Vt str 2450Set either to 2451.Dq Li NO 2452or a whitespace separated list of IRQ numbers which will be used as a source of 2453randomness. 2454.\" ----- isdn settings --------------------------------- 2455.It Va isdn_enable 2456.Pq Vt bool 2457Set to 2458.Dq Li NO 2459by default. 2460When set to 2461.Dq Li YES , 2462starts the 2463.Xr isdnd 8 2464daemon at system boot time. 2465.It Va isdn_flags 2466.Pq Vt str 2467Set to 2468.Dq Fl d Ns Cm n Fl d Ns Li 0x1f9 2469by default. 2470Additional flags to pass to 2471.Xr isdnd 8 2472(but see 2473.Va isdn_fsdev 2474and 2475.Va isdn_ttype 2476for certain tunable parameters). 2477.It Va isdn_ttype 2478.Pq Vt str 2479Set to 2480.Dq Li cons25 2481by default. 2482The terminal type of the output device when 2483.Xr isdnd 8 2484operates in full-screen mode. 2485.It Va isdn_screenflags 2486.Pq Vt str 2487Set to 2488.Dq Li NO 2489by default. 2490The video mode for full-screen mode (only for 2491.Xr syscons 4 2492console driver, see 2493.Xr vidcontrol 1 2494for valid modes). 2495.It Va isdn_fsdev 2496.Pq Vt str 2497Set to 2498.Dq Li NO 2499by default. 2500The output device for 2501.Xr isdnd 8 2502in full-screen mode (or 2503.Dq Li NO 2504for daemon mode). 2505.It Va isdn_trace 2506.Pq Vt bool 2507Set to 2508.Dq Li NO 2509by default. 2510When set to 2511.Dq Li YES , 2512enables the ISDN protocol trace utility 2513.Xr isdntrace 8 2514at system boot time. 2515.It Va isdn_traceflags 2516.Pq Vt str 2517Set to 2518.Dq Fl f Pa /var/tmp/isdntrace0 2519by default. 2520Flags for 2521.Xr isdntrace 8 . 2522.\" ----------------------------------------------------- 2523.It Va entropy_dir 2524.Pq Vt str 2525Set to 2526.Dq Li NO 2527to disable caching entropy via 2528.Xr cron 8 . 2529Otherwise set to the directory used to store entropy files in. 2530.It Va entropy_file 2531.Pq Vt str 2532Set to 2533.Dq Li NO 2534to disable caching entropy through reboots. 2535Otherwise set to the filename used to store cached entropy through reboots. 2536This file should be located on the root file system to seed the 2537.Xr random 4 2538device as early as possible in the boot process. 2539.It Va entropy_save_sz 2540.Pq Vt int 2541Size of the entropy cache files saved by 2542.Nm save-entropy 2543periodically. 2544.It Va entropy_save_num 2545.Pq Vt int 2546Number of entropy cache files to save by 2547.Nm save-entropy 2548periodically. 2549.It Va ipsec_enable 2550.Pq Vt bool 2551Set to 2552.Dq Li YES 2553to run 2554.Xr setkey 8 2555on 2556.Va ipsec_file 2557at boot time. 2558.It Va ipsec_file 2559.Pq Vt str 2560Configuration file for 2561.Xr setkey 8 . 2562.It Va dmesg_enable 2563.Pq Vt bool 2564Set to 2565.Dq Li YES 2566to save 2567.Xr dmesg 8 2568to 2569.Pa /var/run/dmesg.boot 2570on boot. 2571.It Va rcshutdown_timeout 2572.Pq Vt int 2573If set, start a watchdog timer in the background which will terminate 2574.Pa rc.shutdown 2575if 2576.Xr shutdown 8 2577has not completed within the specified time (in seconds). 2578.El 2579.Sh FILES 2580.Bl -tag -width ".Pa /etc/defaults/rc.conf" -compact 2581.It Pa /etc/defaults/rc.conf 2582.It Pa /etc/rc.conf 2583.It Pa /etc/rc.conf.local 2584.El 2585.Sh SEE ALSO 2586.Xr catman 1 , 2587.Xr gdb 1 , 2588.Xr info 1 , 2589.Xr kbdcontrol 1 , 2590.Xr varsym 1 , 2591.Xr vidcontrol 1 , 2592.Xr ip 4 , 2593.Xr ipf 4 , 2594.Xr ipfw 4 , 2595.Xr kld 4 , 2596.Xr pf 4 , 2597.Xr tcp 4 , 2598.Xr udp 4 , 2599.Xr exports 5 , 2600.Xr motd 5 , 2601.Xr resident.conf 5 , 2602.Xr varsym.conf 5 , 2603.Xr accton 8 , 2604.Xr amd 8 , 2605.Xr apm 8 , 2606.Xr atm 8 , 2607.Xr cron 8 , 2608.Xr dhclient 8 , 2609.Xr dhcpd 8 , 2610.Xr dhcrelay 8 , 2611.Xr dntpd 8 , 2612.Xr ftpd 8 , 2613.Xr ifconfig 8 , 2614.Xr inetd 8 , 2615.Xr isdnd 8 , 2616.Xr isdntrace 8 , 2617.Xr kldxref 8 , 2618.Xr lpd 8 , 2619.Xr makewhatis 8 , 2620.Xr mdconfig 8 , 2621.Xr mixer 8 , 2622.Xr mountd 8 , 2623.Xr moused 8 , 2624.Xr mrouted 8 , 2625.Xr named 8 , 2626.Xr nfsd 8 , 2627.Xr ntpd 8 , 2628.Xr pcnfsd 8 , 2629.Xr pfctl 8 , 2630.Xr pflogd 8 , 2631.Xr quotacheck 8 , 2632.Xr quotaon 8 , 2633.Xr rc 8 , 2634.Xr rc.sendmail 8 , 2635.Xr resident 8 , 2636.Xr rndcontrol 8 , 2637.Xr route 8 , 2638.Xr routed 8 , 2639.Xr rpc.lockd 8 , 2640.Xr rpc.statd 8 , 2641.Xr rpcbind 8 , 2642.Xr rtsold 8 , 2643.Xr rwhod 8 , 2644.Xr savecore 8 , 2645.Xr sshd 8 , 2646.Xr swapon 8 , 2647.Xr sysctl 8 , 2648.Xr syslogd 8 , 2649.Xr timed 8 , 2650.Xr usbd 8 , 2651.Xr vinum 8 , 2652.Xr yp 8 , 2653.Xr ypbind 8 , 2654.Xr ypserv 8 , 2655.Xr ypset 8 2656.Sh HISTORY 2657The 2658.Nm 2659file appeared in 2660.Fx 2.2.2 . 2661.Sh AUTHORS 2662.An Jordan K. Hubbard . 2663