Date: Sat, 27 Sep 2003 06:50:47 -0700 (PDT) From: Maxime Henrion <mux@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/etc/rc.d ipfilter Message-ID: <200309271350.h8RDolwx035973@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
mux 2003/09/27 06:50:47 PDT
FreeBSD src repository
Modified files:
etc/rc.d ipfilter
Log:
A number of fixes/enhancements for the ipfilter rc script:
- Use a more robust check to determine if we need to load ipl.ko.
- Don't try to run ipf -E if ipfilter is already enabled. Look at
the net.inet.ipf.fr_running sysctl to figure this out. This fixes
a warning message about ipfilter being already initialized.
- Only one ipf -E command is needed. We don't need an extra one for
the -6 case which would only print a warning message about ipfilter
being already initialized.
- Fix one occurence where we were running /sbin/ipf directly without
using the ${ipfilter_program} variable if set.
- In ipfilter_stop(), don't try to save the firewall state tables if
ipfilter is disabled. Similarly, don't try to disable it if it's
already disabled. This fixes some more error messages.
Revision Changes Path
1.12 +22 -15 src/etc/rc.d/ipfilter
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200309271350.h8RDolwx035973>