Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Jul 2001 12:32:34 +0200
From:      "Kozlovsky, Marek" <Marek.Kozlovsky@KPNQwest.com>
To:        "'freebsd-stable@freebsd.org'" <freebsd-stable@freebsd.org>
Subject:   RE: ipfw not running custom rulesets
Message-ID:  <31FD3FA70CBED31189E700508B6401718E0C97@ntexgpra01>

next in thread | raw e-mail | index | archive | help

Hi,

> Hello All,
> 
> I have cvsuped to -stable on Jul 7, after the system seemed 
> ok, I have built
> a custom kernel with IPFIREWALL and 
> IPFIREWALL_DEFAULT_TO_ACCEPT options in
> it.
> 
> Now, on 4.2-R it was ok, but on 4.3-S somewhy ipfw refuses to 
> run my custom
> ruleset on boot up.
> 
> voyager# cat /etc/rc.conf | grep firewall
> firewall_enable="YES"
> firewall_script="/etc/rc.firewall"
> firewall_type="/etc/ipfw.rules"
> firewall_quiet="YES"
> 
> voyager# cat /etc/ipfw.rules
> /sbin/ipfw -f flush
> /sbin/ipfw add 2 prob 0.5 deny icmp from any to any in icmptypes 8
> /sbin/ipfw add 150 deny tcp from any to any 111,587,3306
> /sbin/ipfw add 151 deny udp from any to any 111,587,3306
> 

here's the error I believe. /etc/rc.firewall says $fwcmd $fwflags $fw_type,
so you should put in /etc/ipfw.rules your rules without the leading
'/sbin/ipfw'

> So i have to load these rules manually.
> Any ideas?
> 
> Thanks.
> 
> -=-=-=-
> Regards,
> 
> Alex M aka TZapper
> alex@myzona.net

Buki

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?31FD3FA70CBED31189E700508B6401718E0C97>