From owner-freebsd-stable@FreeBSD.ORG  Tue Feb  3 08:08:57 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 367A716A4CE
	for <freebsd-stable@freebsd.org>;
	Tue,  3 Feb 2004 08:08:57 -0800 (PST)
Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net [204.127.198.35])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 39B2443D62
	for <freebsd-stable@freebsd.org>;
	Tue,  3 Feb 2004 08:08:56 -0800 (PST)
	(envelope-from d.antunes@comcast.net)
Received: from 204.127.197.111 ([204.127.197.111])
          by comcast.net (rwcrmhc11) with SMTP
          id <20040203160855013009r0r3e>; Tue, 3 Feb 2004 16:08:55 +0000
Received: from [68.166.125.50] by 204.127.197.111;
	Tue, 03 Feb 2004 16:08:55 +0000
From: d.antunes@comcast.net
To: regis rampnoux <regisr@regix.com>
Date: Tue, 03 Feb 2004 16:08:55 +0000
Message-Id: <020320041608.11204.3222@comcast.net>
X-Mailer: AT&T Message Center Version 1 (Oct 27 2003)
X-Authenticated-Sender: ZC5hbnR1bmVzQGNvbWNhc3QubmV0
cc: freebsd-stable@freebsd.org
Subject: Re: ipfw questions
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Feb 2004 16:08:57 -0000

For Dag from the rc.conf man page... 
firewall_type
                   (str) Names the firewall type from the selection in
                   /etc/rc.firewall, or the file which contains the local
                   firewall ruleset.  Valid selections from /etc/rc.firewall,
                   are ``open'' - unrestricted IP access; ``closed'' - all IP
                   services disabled, except via lo0; ``client'' - basic pro-
                   tection for a workstation; ``simple'' - basic protection
                   for a LAN.  If a filename is specified, the full path must
                   be given.

I could edit rc.firewall, or specify a different script with firewall_script, but it seemed more convenient to simply specify a "rules file". If anyone knows how this can be done, I would appreciate a response.
Thanks,
Dennis
> 
> On 03-Feb-2004 Dag-Erling Smørgrav wrote:
> > firewall_type is used to select one of several standard setups in
> > /etc/rc.firewall.  The correct variable to use to specify a different
> > firewall script is firewall_script.
> 
> Yes, but Dennis wants to specify the rules file, non the script, no?
> (Yes it is also in the man page;-)
> 
> -- 
> <regisr>  
> _______________________________________________
> freebsd-stable@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"