Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 14 Feb 2004 15:28:59 -0500
From:      Chuck Swiger <cswiger@mac.com>
To:        Dima Dorfman <dima@trit.org>
Cc:        current@freebsd.org
Subject:   Re: usb devices and devfs settings
Message-ID:  <402E850B.6000408@mac.com>
In-Reply-To: <20040214002857.GB7396@trit.org>
References:  <20040213113134.GA11021@gvr.gvr.org> <xzpn07nawqu.fsf@dwp.des.no> <20040213144338.GA13380@gvr.gvr.org> <xzpad3nhtfv.fsf@dwp.des.no> <20040213154946.GA14227@gvr.gvr.org> <xzp1xozhsx4.fsf@dwp.des.no> <20040214002857.GB7396@trit.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Dima Dorfman wrote:
> Dag-Erling Sm?rgrav <des@des.no> wrote:
>>(like ipfw does);
> 
> ipfw(8) doesn't actually read from a file; rc.firewall calls ${fwcmd}
> explicitly for each rule.

While the mode of operation you describe is the default behavior, please note 
that /etc/rc.firewall ends with:

         if [ -r "${firewall_type}" ]; then
                 ${fwcmd} ${firewall_flags} ${firewall_type}
         fi

If you set firewall_type to the name of a file,ipfw will happy read one rule 
per line from that file via a pre-processor like cpp (or cat)...

-- 
-Chuck



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?402E850B.6000408>