From owner-freebsd-questions  Tue Aug 24  2:32:20 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from vax1.baker.ie (VAX1.baker.IE [194.125.50.91])
	by hub.freebsd.org (Postfix) with SMTP id CF87415278
	for <freebsd-questions@FreeBSD.ORG>; Tue, 24 Aug 1999 02:32:15 -0700 (PDT)
	(envelope-from cillian@baker.ie)
Received: from baker.ie ([194.125.50.55]) by vax1.baker.ie with ESMTP;
          Tue, 24 Aug 1999 10:04:06 +0100
Message-ID: <37C25B46.B265AB4D@baker.ie>
Date: Tue, 24 Aug 1999 09:43:50 +0100
From: Cillian Sharkey <cillian@baker.ie>
X-Mailer: Mozilla 4.6 [en] (Win95; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Conrad Sabatier <conrads@home.com>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Sourcing local file from /etc/rc.firewall not working
References: <XFMail.990823214457.conrads@home.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

> To suck in my own local ipfw rules, I added the following lines at
> the end of /etc/rc.firewall:
> 
> if [ -f /etc/rc.firewall.local ]; then
>         . /etc/rc.firewall.local
> fi
> 
> The file /etc/rc.firewall.local consists simply of a series of lines
> in the form of:
> 
> /sbin/ipfw add deny log all from some-ip:255.255.255.255 to any
> 
> What's puzzling is that these lines are not being executed at boot
> time, even though they work if I do ". /etc/rc.firewall" from the
> command line.

take a look at /etc/rc.conf (and /etc/defaults/rc.conf)
you can specify a file containing firewall rules to load in

the file contains rules like so :
add deny log all from some-ip:255.255.255.255 to any
etc.

Cillian


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message