From owner-freebsd-security Fri Nov 17 16:36:36 2000 Delivered-To: freebsd-security@freebsd.org Received: from caligula.anu.edu.au (caligula.anu.edu.au [150.203.224.42]) by hub.freebsd.org (Postfix) with ESMTP id B53A937B4C5 for ; Fri, 17 Nov 2000 16:36:31 -0800 (PST) Received: (from avalon@localhost) by caligula.anu.edu.au (8.9.3/8.9.3) id LAA15457; Sat, 18 Nov 2000 11:35:57 +1100 (EST) From: Darren Reed Message-Id: <200011180035.LAA15457@caligula.anu.edu.au> Subject: Re: Restarting Firewall ruleset To: traviso@RapidNet.com (Travis {RapidSupport}) Date: Sat, 18 Nov 2000 11:35:57 +1100 (Australia/ACT) Cc: nuno.teixeira@pt-quorum.com (Nuno Teixeira), freebsd-security@FreeBSD.ORG In-Reply-To: from "Travis {RapidSupport}" at Nov 17, 2000 04:23:44 PM X-Mailer: ELM [version 2.5 PL1] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In some mail from Travis {RapidSupport}, sie said: > > If you are running ipf then: > > ipf -F a && ipf -f /etc/firewalls/ipf.blah No, you should do: ipf -If /etc/firewalls/ipf.blah && ipf -s -IF a load rules into alternative set, if successful then switch active sets and flush the old rules. Doing this means there is no gap in which a partial ruleset is loaded and active. Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message