Date: Tue, 6 Nov 2001 14:50:20 -0800 From: Sean Ellis <sellis@intergate.ca> To: "Crist J. Clark" <cjclark@alum.mit.edu> Cc: Zev Thompson <zev@interchange.ubc.ca>, Scott Nolde <scott@smnolde.com>, freebsd-questions@FreeBSD.ORG Subject: Re: ipfw script values Message-ID: <179093989.20011106145020@intergate.ca> In-Reply-To: <20011106141846.C386@blossom.cjclark.org> References: <3.0.32.20011106123552.00db8e40@pop.interchange.ubc.ca> <20011106141846.C386@blossom.cjclark.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hey,
Tuesday, November 06, 2001, 2:18:46 PM, you wrote:
> On Tue, Nov 06, 2001 at 12:35:53PM -0800, Zev Thompson wrote:
>> Hi Sean, I use the following command in my rc.firewall:
>>
>> ifconfig ex0 | grep "inet " | awk '{print $2}'
> Pet peeve. I have to do this. I cannot help it. No offense intended.
> ifconfig ex0 | awk '/inet/ {print $2}'
thanks for the input. It's also been pointed out to me that rules along
the line of:
/sbin/ipfw add 01200 deny all from 192.168.1.0/24 to any in via tun0
/sbin/ipfw add 01300 deny all from 192.168.2.0/24 to any in via tun0
/sbin/ipfw add 02500 deny all from 10.0.0.0/8 to any via tun0
/sbin/ipfw add 02600 deny all from any to 10.0.0.0/8 via tun0
get around the issue by using the name of the interface.
I have a couple of related questions. Since I have more than one
script I was hoping to be able define an enviromental variable that I
could check really easily in case I forget which was the last script
that ran; ie. 'echo $FW'. Nothing I've tried so far works. I've added
the line 'echo $0 > /var/run/firewall', which is good, but I'd like to
know why my attempts to export the value failed.
Also, the DHCP client on my Slackware box executes a script when the
ip changes, does the FreeBSD dhcp client have the same function. I
couldn't find it when I looked, thanks,
--
Best regards,
Sean mailto:sellis@intergate.ca
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?179093989.20011106145020>