From owner-freebsd-newbies@FreeBSD.ORG  Wed Dec 22 21:18:58 2004
Return-Path: <owner-freebsd-newbies@FreeBSD.ORG>
Delivered-To: freebsd-newbies@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5065E16A4CE
	for <newbies@freebsd.org>; Wed, 22 Dec 2004 21:18:58 +0000 (GMT)
Received: from mail.freeode.co.uk (freeode.co.uk [213.162.123.161])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7DC0343D5A
	for <newbies@freebsd.org>; Wed, 22 Dec 2004 21:18:57 +0000 (GMT)
	(envelope-from sub01@freeode.co.uk)
Received: from lexx (lexx.freeode.co.uk [10.253.253.2])
	by mail.freeode.co.uk (8.12.10/8.12.10) with ESMTP id iBMLIrCZ034659;
	Wed, 22 Dec 2004 21:18:53 GMT
	(envelope-from sub01@freeode.co.uk)
From: John Murphy <sub01@freeode.co.uk>
To: "Dott. Surricani" <surricani@gmail.com>
Date: Wed, 22 Dec 2004 21:18:53 +0000
Message-ID: <cgojs0t1ima9lpr35c0v9kd9ljogj35m1t@4ax.com>
References: <4591fd91041222084071ae57b4@mail.gmail.com>
In-Reply-To: <4591fd91041222084071ae57b4@mail.gmail.com>
X-Mailer: Forte Agent 1.93/32.576 English (American)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: newbies@freebsd.org
Subject: Re: Problem with IPFILTER
X-BeenThere: freebsd-newbies@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: sub01@freeode.co.uk
List-Id: Gathering place for new users <freebsd-newbies.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-newbies>,
	<mailto:freebsd-newbies-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-newbies>
List-Post: <mailto:freebsd-newbies@freebsd.org>
List-Help: <mailto:freebsd-newbies-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-newbies>,
	<mailto:freebsd-newbies-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Dec 2004 21:18:58 -0000

"Dott. Surricani" <surricani@gmail.com> wrote:

>each time I restart the server the rules are cleared and It leave all
>packets enter and exit
>an I have to type in the shell
>
>ipf -Fa -f /etc/ipf.rules and
>ipnat -CF -f /etc/ipnat.rules
>
>It's very boring....
>
>What I can do to automate this task?

It's simply a matter of having lines in /etc/rc.conf to indicate where
the rules are.  I have a similar setup on my gateway and the relevant
lines look like this:

ipfilter_enable="YES"
ipfilter_program="/sbin/ipf"
ipfilter_rules="/etc/ipf.rules"
ipfilter_flags=""

ipnat_enable="YES"
ipnat_program="/sbin/ipnat"
ipnat_rules="/etc/ipnat.rules"
ipnat_flags=""

>Thanks all very much!!!!

You're welcome but questions (even newbie ones) of a technical
nature should be asked over at questions@freebsd.org.

-- 
John.