From owner-freebsd-stable  Thu May 17 22:13:21 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from rip.psg.com (rip.psg.com [147.28.0.39])
	by hub.freebsd.org (Postfix) with ESMTP id AB11D37B423
	for <freebsd-stable@freebsd.org>; Thu, 17 May 2001 22:13:19 -0700 (PDT)
	(envelope-from randy@psg.com)
Received: from randy by rip.psg.com with local (Exim 3.16 #1)
	id 150cZa-0006li-00; Thu, 17 May 2001 22:13:10 -0700
From: Randy Bush <randy@psg.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: Joe Abley <jabley@automagic.org>
Cc: FreeBSD Stable <freebsd-stable@freebsd.org>
Subject: Re: starting ipfw
References: <E150aBy-0002kz-00@rip.psg.com>
	<20010517231813.A27636@buddha.home.automagic.org>
Message-Id: <E150cZa-0006li-00@rip.psg.com>
Date: Thu, 17 May 2001 22:13:10 -0700
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
X-Loop: FreeBSD.ORG

>> firewall_enable="YES"		# Set to YES to enable firewall functionality
>> firewall_script="/etc/ipfw.rules" # Which script to run to set up the firewall
> $firewall_script is a script which is sourced from rc.network, not a
> configuration file for ipfw. The default is /etc/rc.firewall.
> Since /etc/ipfw.rules is likely not something that can be sourced by
> sh, you are getting errors.

yup.  the following works.

    firewall_enable="YES"	# Set to YES to enable firewall functionality
    firewall_type="/etc/ipfw.rules" # Which script to run to set up the firewall
    firewall_flags="-q"		# Flags passed to ipfw when type is a file

randy

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message