From owner-freebsd-security Fri Oct 13 12:15:59 2000 Delivered-To: freebsd-security@freebsd.org Received: from mail.gmx.net (pop.gmx.net [194.221.183.20]) by hub.freebsd.org (Postfix) with SMTP id 872EA37B675 for ; Fri, 13 Oct 2000 12:15:54 -0700 (PDT) Received: (qmail 27397 invoked by uid 0); 13 Oct 2000 19:15:53 -0000 Received: from p3ee21608.dip.t-dialin.net (HELO speedy.gsinet) (62.226.22.8) by mail.gmx.net with SMTP; 13 Oct 2000 19:15:53 -0000 Received: (from sittig@localhost) by speedy.gsinet (8.8.8/8.8.8) id TAA27116 for freebsd-security@FreeBSD.ORG; Fri, 13 Oct 2000 19:16:23 +0200 Date: Fri, 13 Oct 2000 19:16:23 +0200 From: Gerhard Sittig To: freebsd-security@FreeBSD.ORG Subject: Re: Dynamic rc.firewall Message-ID: <20001013191623.C25237@speedy.gsinet> Mail-Followup-To: freebsd-security@FreeBSD.ORG References: <5.0.0.25.2.20001013032255.00a8ee40@127.0.0.1> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <5.0.0.25.2.20001013032255.00a8ee40@127.0.0.1>; from redwards@meccamediagroup.com on Fri, Oct 13, 2000 at 03:33:09AM -0600 Organization: System Defenestrators Inc. Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, Oct 13, 2000 at 03:33 -0600, Rolf Edwards wrote: > > How can I have rc.firewall automatically pull in ip, netmask > and network numbers from the currently configured interfaces. > > Lets say I was to supply 'xl0' and have it extract the > information from ifconfig. I started a perl program, but I > don't have enough documentation available at the moment to > actually extract the data from what is returned. I don't know whether ipfw has a similar "alias", but in ipf (which is available in FreeBSD, too) you can specify address 0.0.0.0/32 in your rules when you mean "my current address on this interface". Just make sure to issue "ipf -y" whenever the interface address changes (ppp.linkup or the appropriate dhcp client hook). virtually yours 82D1 9B9C 01DC 4FB4 D7B4 61BE 3F49 4F77 72DE DA76 Gerhard Sittig true | mail -s "get gpg key" Gerhard.Sittig@gmx.net -- If you don't understand or are scared by any of the above ask your parents or an adult to help you. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message