Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Jul 2001 13:32:50 +0100
From:      John Murphy <jfm@blueyonder.co.uk>
To:        questions@FreeBSD.ORG
Subject:   Re: ipfilter stumper
Message-ID:  <pqhokt0bjbn8tgj868eeutfpe90cuduen4@4ax.com>
In-Reply-To: <200107110119.f6B1JK500692@home.com>
References:  <200107110119.f6B1JK500692@home.com>

next in thread | previous in thread | raw e-mail | index | archive | help
tyler spivey <tspivey8@home.com> wrote:

>how do i get the message "ipfileter alreadyin initialized to keep sto =
stop keep stop appearing/sorry for my spelling but i just got a big dos.
>how can i fglush or reload the ipf rules without rebooting?
>and how can firewall aaa.bbb.ccc.* or aaa.bbb.ccc.ddd out?=20

ipfilter_flags=3D"-E"             # should be *empty* when ipf is _not_ a=
 module
                                # (i.e. compiled into the kernel) to
                                # avoid a warning about "already =
initialized"

The above is from /etc/defaults/rc.conf but don't make any changes there.
Just put what you want (without the -E) in /etc/rc.conf

Use ipf -Fa -f /etc/ipf.rules to reload ipf rules

Use aaa.bbb.ccc.ddd/24 to block aaa.bbb.ccc.0 to 255
or aaa.bbb.ccc.ddd/32 to block aaa.bbb.ccc.ddd

John.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?pqhokt0bjbn8tgj868eeutfpe90cuduen4>