Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Jun 2005 07:17:34 +0300
From:      Giorgos Keramidas <keramida@ceid.upatras.gr>
To:        fbsd_user@a1poweruser.com
Cc:        freebsd-questions@freebsd.org
Subject:   Re: IPF adding single rule
Message-ID:  <20050624041734.GB65405@gothmog.gr>
In-Reply-To: <MIEPLLIBMLEEABPDBIEGAEICHHAA.fbsd_user@a1poweruser.com>
References:  <MIEPLLIBMLEEABPDBIEGAEICHHAA.fbsd_user@a1poweruser.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2005-06-23 22:10, fbsd_user <fbsd_user@a1poweruser.com> wrote:
> ipfstat -ni lists the in core inbound rules with their line number
> Say I want to add a single rule before rule line number 17
> If I have a file addrule with  17 block in quick on dc0 from any to any
> and then issue ipf -f addrule  I get error that 17 is unknown keyword (17)
>
> Is there any way to insert a rule into the in core rules at the desired
> location and then later just remove that rule??

Yes there is a way.  You just have to prefix the rule number with '@'.

	# ipf -f -
	@17 block in quick on dc0 from any to any
	^D

This is apparent in the second BNF rule in the description of the IPF
syntax, documented in ipf.conf(5).




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050624041734.GB65405>