|
Lines 67-73
Link Here
|
| 67 |
#ACLFILTERSEQ=YES; export FILTERSEQ |
67 |
#ACLFILTERSEQ=YES; export FILTERSEQ |
| 68 |
# |
68 |
# |
| 69 |
# if ACLSORT is NO, access-lists will NOT be sorted. |
69 |
# if ACLSORT is NO, access-lists will NOT be sorted. |
| 70 |
#ACLSORT=YES; export ACLSORT |
70 |
# |
|
|
71 |
#Gentoo - changing default to NO because access-list order matters in most instances |
| 72 |
#and many people expect to use rancid as a backup system |
| 73 |
ACLSORT=NO; export ACLSORT |
| 71 |
# |
74 |
# |
| 72 |
# if NOPIPE is set, temp files will be used instead of a cmd pipe during |
75 |
# if NOPIPE is set, temp files will be used instead of a cmd pipe during |
| 73 |
# collection from the router(s). |
76 |
# collection from the router(s). |
|
Lines 75-85
Link Here
|
| 75 |
# |
78 |
# |
| 76 |
# FILTER_PWDS determines which passwords are filtered from configs by the |
79 |
# FILTER_PWDS determines which passwords are filtered from configs by the |
| 77 |
# value set (NO | YES | ALL). see rancid.conf(5). |
80 |
# value set (NO | YES | ALL). see rancid.conf(5). |
| 78 |
#FILTER_PWDS=YES; export FILTER_PWDS |
81 |
# |
|
|
82 |
#Gentoo - changing default to ALL; diffs are emailed and even the most secure |
| 83 |
#password hashes on most routers are easily brute-forceable with modern systems |
| 84 |
FILTER_PWDS=ALL; export FILTER_PWDS |
| 79 |
# |
85 |
# |
| 80 |
# if NOCOMMSTR is set to YES, snmp community strings will be stripped from the |
86 |
# if NOCOMMSTR is set to YES, snmp community strings will be stripped from the |
| 81 |
# configs. |
87 |
# configs. |
| 82 |
#NOCOMMSTR=YES; export NOCOMMSTR |
88 |
# |
|
|
89 |
#Gentoo - changing default to YES; diffs are emailed and SNMP communities |
| 90 |
#can be just as dangerous as passwords |
| 91 |
NOCOMMSTR=YES; export NOCOMMSTR |
| 83 |
# |
92 |
# |
| 84 |
# FILTER_OSC determines if oscillating data such as keys, passwords, etc are |
93 |
# FILTER_OSC determines if oscillating data such as keys, passwords, etc are |
| 85 |
# filtered from configs by the value set (NO | YES). FILTER_PWDS may override |
94 |
# filtered from configs by the value set (NO | YES). FILTER_PWDS may override |
