Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 29 Sep 2005 09:32:58 +0200 (CEST)
From:      Oliver Fromme <olli@lurza.secnetix.de>
To:        freebsd-ipfw@FreeBSD.ORG
Subject:   Re: Enable ipfw without rebooting
Message-ID:  <200509290732.j8T7Ww7j086436@lurza.secnetix.de>
In-Reply-To: <6.2.1.2.2.20050929121426.02954710@202.179.0.80>

next in thread | previous in thread | raw e-mail | index | archive | help
Ganbold <ganbold@micom.mng.net> wrote:
 > Oliver Fromme wrote:
 > > [...]
 > > For changing (and testing) rules, there's an even more
 > > elegant (and non-[qddisruptive) solution, see:
 > > /usr/share/examples/ipfw/change_rules.sh
 > 
 > If you want to restart ipfw you can try:
 > 
 > /etc/rc.d/ipfw restart
 > 
 > command if you are using FreeBSD 5.x or later.

But that command does not provide _any_ safety net at all
(against a problem with your ruleset) when you're logged
in via network.  It is only safe to use when you have
access to the console.

Better use the script that I mentioned (or an appropriate
at(1) command or whatever):
/usr/share/examples/ipfw/change_rules.sh

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

"Emacs ist für mich kein Editor. Für mich ist das genau das gleiche, als
wenn ich nach einem Fahrrad (für die Sonntagbrötchen) frage und einen
pangalaktischen Raumkreuzer mit 10 km Gesamtlänge bekomme. Ich weiß nicht,
was ich damit soll." -- Frank Klemm, de.comp.os.unix.discussion



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200509290732.j8T7Ww7j086436>