From owner-freebsd-questions@FreeBSD.ORG  Wed Jan 24 21:18:16 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 4E92F16AA18
	for <questions@freebsd.org>; Wed, 24 Jan 2007 21:18:15 +0000 (UTC)
	(envelope-from danm@prime.gushi.org)
Received: from prime.gushi.org (prime.gushi.org [72.9.101.130])
	by mx1.freebsd.org (Postfix) with ESMTP id 40A8013C45E
	for <questions@freebsd.org>; Wed, 24 Jan 2007 21:18:15 +0000 (UTC)
	(envelope-from danm@prime.gushi.org)
Received: from prime.gushi.org (localhost [127.0.0.1])
	by prime.gushi.org (8.13.8/8.13.8) with ESMTP id l0OLID5i023566
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Wed, 24 Jan 2007 16:18:14 -0500 (EST)
	(envelope-from danm@prime.gushi.org)
DKIM-Signature: a=rsa-sha1; c=simple/simple; d=prime.gushi.org;
	s=primegushiorg; t=1169673494; bh=r1AwzSqRSTjdf0+5PHnG7POcXB0=;
	h=DomainKey-Signature:
	Received:Date:From:To:cc:Subject:In-Reply-To:Message-ID:References:
	MIME-Version:Content-Type; b=c0mMsqdj7s6TmB2KHvW8z1TZBfL+1XEuU1vca9
	K/jSVs6r6dkNko4yUc5JHawM8jrie7uRiHqtUUeTSudtR1mA==
DomainKey-Signature: a=rsa-sha1; s=primegushiorg; d=prime.gushi.org; c=nofws;
	q=dns; 
	h=received:date:from:to:cc:subject:in-reply-to:message-id:
	references:mime-version:content-type;
	b=TglmHjMaCK55SayJYZmOwFhI6l4OaX60Oo7ISbvhdXGURzYItqvNEnXU3b1/PfGs7
	mQh0nmVIQ3ExqHSOZq2oA==
Received: (from danm@localhost)
	by prime.gushi.org (8.13.8/8.13.6/Submit) id l0OLIDR9023565;
	Wed, 24 Jan 2007 16:18:13 -0500 (EST) (envelope-from danm)
Date: Wed, 24 Jan 2007 16:18:12 -0500 (EST)
From: "Dan Mahoney, System Admin" <danm@prime.gushi.org>
To: applecom@inbox.ru
In-Reply-To: <op.tmofw2nzhbloih@xml.opera.com>
Message-ID: <20070124161732.N55095@prime.gushi.org>
References: <20070124152310.E82156@prime.gushi.org>
	<op.tmofw2nzhbloih@xml.opera.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: questions@freebsd.org
Subject: Re: Problem with "ipfw flush"
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jan 2007 21:18:16 -0000

On Thu, 25 Jan 2007, applecom@inbox.ru wrote:

>> In trying to tweak my firewall setup I'm using a file called 
>> /etc/ipfw.rules
>> 
>> However, it seems even though I copy my rules perfectly to that file, the 
>> system freezes up and locks me out when I do:
>> 
>> ipfw -f flush; ipfw /etc/ipfw.rules
>> 
>> I've also tried doing it as
>> 
>> ipfw -f flush && ipfw /etc/ipfw.rules
>> 
>> But to no avail.
>
> Firewall script is a common shell script. You don't need to run 'ipfw 
> <script>'.
> Flushing the rules is usually done by script itself.
> For example:
> #!/bin/sh
> ipfw="/sbin/ipfw"
> ${ipfw} -f flush
> ${ipfw} <rule>
> ${ipfw} <rule>
> ${ipfw} <rule>
> ...
> This file should be executable (chmod +x). You can also put any non-ipfw 
> additional commands in this file if you want.
> Try to make such script, execute it and write again about the results.

Well, I'm trying to be compliant with /etc/rc.firewall's expectations for 
a rules file, which IS called with ipfw "rules.file"

-Dan

--

<Gushi> And hello kitty does not have a mouth.
<bizzy> . o O ( oh yes she does )

EfNet #macintosh, 2/21/01, some ridiculous hour of the morning

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---------------------------