From owner-freebsd-questions@FreeBSD.ORG  Wed Jan 24 21:13:45 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 90C3C16A405
	for <questions@freebsd.org>; Wed, 24 Jan 2007 21:13:45 +0000 (UTC)
	(envelope-from applecom@inbox.ru)
Received: from mx27.mail.ru (mx27.mail.ru [194.67.23.64])
	by mx1.freebsd.org (Postfix) with ESMTP id 2238D13C428
	for <questions@freebsd.org>; Wed, 24 Jan 2007 21:13:44 +0000 (UTC)
	(envelope-from applecom@inbox.ru)
Received: from [85.115.165.63] (port=18837 helo=xml.opera.com)
	by mx27.mail.ru with asmtp 
	id 1H9pR7-000MqZ-00; Thu, 25 Jan 2007 00:13:41 +0300
Date: Thu, 25 Jan 2007 02:13:40 +0500
To: "Dan Mahoney, System Admin" <danm@prime.gushi.org>
From: applecom@inbox.ru
Content-Type: text/plain; format=flowed; delsp=yes; charset=iso-8859-1
MIME-Version: 1.0
References: <20070124152310.E82156@prime.gushi.org>
Content-Transfer-Encoding: Quoted-Printable
Message-ID: <op.tmofw2nzhbloih@xml.opera.com>
In-Reply-To: <20070124152310.E82156@prime.gushi.org>
User-Agent: Opera Mail/9.10 (FreeBSD)
Cc: questions@freebsd.org
Subject: Re: Problem with "ipfw flush"
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jan 2007 21:13:45 -0000

> In trying to tweak my firewall setup I'm using a file called  =

> /etc/ipfw.rules
>
> However, it seems even though I copy my rules perfectly to that file, =
 =

> the system freezes up and locks me out when I do:
>
> ipfw -f flush; ipfw /etc/ipfw.rules
>
> I've also tried doing it as
>
> ipfw -f flush && ipfw /etc/ipfw.rules
>
> But to no avail.

Firewall script is a common shell script. You don't need to run 'ipfw  =

<script>'.
Flushing the rules is usually done by script itself.
For example:
#!/bin/sh
ipfw=3D"/sbin/ipfw"
${ipfw} -f flush
${ipfw} <rule>
${ipfw} <rule>
${ipfw} <rule>
...
This file should be executable (chmod +x). You can also put any non-ipfw=
  =

additional commands in this file if you want.
Try to make such script, execute it and write again about the results.