Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Dec 2004 21:18:53 +0000
From:      John Murphy <sub01@freeode.co.uk>
To:        "Dott. Surricani" <surricani@gmail.com>
Cc:        newbies@freebsd.org
Subject:   Re: Problem with IPFILTER
Message-ID:  <cgojs0t1ima9lpr35c0v9kd9ljogj35m1t@4ax.com>
In-Reply-To: <4591fd91041222084071ae57b4@mail.gmail.com>
References:  <4591fd91041222084071ae57b4@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
"Dott. Surricani" <surricani@gmail.com> wrote:

>each time I restart the server the rules are cleared and It leave all
>packets enter and exit
>an I have to type in the shell
>
>ipf -Fa -f /etc/ipf.rules and
>ipnat -CF -f /etc/ipnat.rules
>
>It's very boring....
>
>What I can do to automate this task?

It's simply a matter of having lines in /etc/rc.conf to indicate where
the rules are.  I have a similar setup on my gateway and the relevant
lines look like this:

ipfilter_enable="YES"
ipfilter_program="/sbin/ipf"
ipfilter_rules="/etc/ipf.rules"
ipfilter_flags=""

ipnat_enable="YES"
ipnat_program="/sbin/ipnat"
ipnat_rules="/etc/ipnat.rules"
ipnat_flags=""

>Thanks all very much!!!!

You're welcome but questions (even newbie ones) of a technical
nature should be asked over at questions@freebsd.org.

-- 
John.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cgojs0t1ima9lpr35c0v9kd9ljogj35m1t>