Date: Thu, 20 Aug 1998 17:47:40 +0200 (CEST) From: Malte Lance <malte.lance@gmx.net> To: wwoods@cybcon.com Cc: FreeBSD Questions <freebsd-questions@FreeBSD.ORG> Subject: Re: Firewall Message-ID: <13788.17366.774415.752972@neuron.webmore.de> In-Reply-To: <XFMail.980820055314.wwoods@cybcon.com> References: <XFMail.980820055314.wwoods@cybcon.com>
next in thread | previous in thread | raw e-mail | index | archive | help
William Woods writes: > I have a script that every day does a ipfw list > /home/william/ipfwlist to > save my firewall settings in case I need to reboot. Now what I would like to do > is when I boot have those rules loaded automatically. > > This is the settings in use in my rc.firewall file: > > if [ "${firewall_type}" = "open" -o "${firewall_type}" = "OPEN" ]; then > > $fwcmd add 65000 pass all from any to any > $fwcmd add 63000 deny log icmp from any to 205.147.76.99 icmptype 8 > $fwcmd add 62099 allow icmp from 205.147.76.99 to 205.147.76.99 icmmptype 8 > > > Would it be possible to replace these with something along the lines of > > ipfw /home/william/ipfwlist . Yes. > > or can you suggest a better way? >From the beginning of /etc/rc.firewall: ############ # Define the firewall type in /etc/rc.conf. Valid values are: # open - will allow anyone in # client - will try to protect just this machine # simple - will try to protect a whole network # closed - totally disables IP services except via lo0 interface # UNKNOWN - disables the loading of firewall rules. # filename - will load the rules in the given filename (full path required) So why don't you use the filename-method ? Just specify the path to the firewall-rule-file in /etc/rc.conf (This is on my 2.2.6-box) Malte. > --------------------- > William Woods <wwoods@cybcon.com> > Date: 20-Aug-98 / Time: 05:45:54 > goto to: http//www.freebsd.org. > --> FreeBSD 3.0 CURRENT <-- > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?13788.17366.774415.752972>