Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 Sep 2004 20:51:33 -0000
From:      Thomas Wolf <tw@wsf.at>
To:        Steve Bertrand <iaccounts@ibctech.ca>, freebsd-ipfw@freebsd.org
Subject:   Re: Rule Sets
Message-ID:  <20040910225133.e7tgbdlt67sww4@.mailhost.wsf.at>

next in thread | raw e-mail | index | archive | help

Steve Bertrand <iaccounts@ibctech.ca> schrieb:

> I am adding new rules to a ruleset (2) in my firewall script.
> 
> When I disable and then re-enable the set in question, the new rules
> do not get loaded. Is there a way to enable these newly added rules by
> having IPFW pick up the new rules from the set, without having to
> flush and reload, or add them manually?

Hm, could you post the commands you are trying or at
least the error messages you are getting? 
I just verified the following and it works fine:

bsd52# ipfw add 1 set 2 count all from any to any
00001 count ip from any to any
bsd52# ipfw -S show 1
00001     47       4012 set 2 count ip from any to any
bsd52# ipfw set disable 2
bsd52# ipfw -S show 1
# DISABLED 00001    104       8944 set 2 count ip from any to any
bsd52# ipfw set enable  2
bsd52# ipfw -S show 1
00001    114       9832 set 2 count ip from any to any
bsd52#
(This is on 5.2.1-RELEASE-p9, what do you have?)

Thomas

--
Thomas Wolf
Wiener Software Fabrik
Dubas u. Wolf GMBH
1050 Wien, Mittersteig 4



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040910225133.e7tgbdlt67sww4>