From owner-freebsd-questions Sun Jun 27 2:22: 4 1999 Delivered-To: freebsd-questions@freebsd.org Received: from relay.ucb.crimea.ua (relay.ucb.crimea.ua [212.110.138.1]) by hub.freebsd.org (Postfix) with ESMTP id DA25015088 for ; Sun, 27 Jun 1999 02:21:53 -0700 (PDT) (envelope-from ru@ucb.crimea.ua) Received: (from ru@localhost) by relay.ucb.crimea.ua (8.9.3/8.9.3/UCB) id MAA56975; Sun, 27 Jun 1999 12:21:33 +0300 (EEST) (envelope-from ru) Date: Sun, 27 Jun 1999 12:21:33 +0300 From: Ruslan Ermilov To: Jerry Raynor Cc: questions@FreeBSD.ORG Subject: Re: rc.firewall Message-ID: <19990627122133.B51969@relay.ucb.crimea.ua> Mail-Followup-To: Jerry Raynor , questions@FreeBSD.ORG References: <37731F90.D91B40FD@thedial.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.3i In-Reply-To: ; from Jerry Raynor on Fri, Jun 25, 1999 at 03:06:22PM -0400 X-Operating-System: FreeBSD 3.2-STABLE i386 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, Jun 25, 1999 at 03:06:22PM -0400, Jerry Raynor wrote: > I'm trying to set a firewall, when I run the ipfw commands from the > command line no problem it works. Now I've created rc.firewall to set > this up but if I were to for example reboot, everything is closed by > default like it doesn't even see the rc.firewall. I run the ipfw > commands at the command line and I'm ok. In the rc.conf file I have > firewall turned on and type set to simple, I'm guessing my > syntax in rc.firewall is wrong? Here it is: > > if [ "${firewall}" = "simple" ]; then ^^^^^^^^ it should be `firewall_type' :-) > # allow access > /sbin/ipfw add 65000 pass all from any to any > # Deny > /sbin/ipfw add 00001 deny all from 209.161.229.0/24 to my-domain.com > /sbin/ipfw add 00002 deny all from 209.161.243.0/24 to my-domain.com > fi > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- Ruslan Ermilov Sysadmin and DBA of the ru@ucb.crimea.ua United Commercial Bank, ru@FreeBSD.org FreeBSD committer, +380.652.247.647 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message