Using a filename as argument to firewall_type in rc.conf, results in a boot failure because ipfw will not accept a -q option if a filename is given. I have worked around this by replacing the last line in rc.firewall with ipfw ${firewall_type} </dev/null The -q (or redirection) should be needed since the leading flush in the firewall config file makes the boot hang otherwise. However, when the config is coming from a file, there appears to be no way to make ipfw accept a -q. Fix: The first time I ran into this I did a minor rewrite to ipfw so it would parse arguments correctly; it currently uses getopt improperly. Then I did a make world and lost my fixes :-( The removal of -q from that last command line, and redirect of stdin from /dev/null at least works around the problem, though it isn't a real fix. How-To-Repeat: See Description
State Changed From-To: open->suspended awaiting committer
State Changed From-To: suspended->closed Fixed by providing support for -q with file input in RELENG