Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Jan 2003 09:45:09 -0500 (EST)
From:      "Stephen D. Kingrea" <reytech@sover.net>
To:        freebsd-questions@freebsd.org
Subject:   questions about static ipfw rules
Message-ID:  <Pine.BSI.4.21.0301220931310.19656-100000@granite.sover.net>

next in thread | raw e-mail | index | archive | help
running 4.7 with firewall, natd enabled kernel. i wish to create firewall
rules outside of the rc.firewall script that remain static across
reboots. to that end, i created a set (rc.firewall.rules), pointing
rc.conf to that set:

firewall_enable="YES"
firewall_type="/etc/rc.firewall.rules"
natd_enable="YES".....etc....

/etc/rc.firewall.rules lines are in the format:

add 00100 all ip from any to any via lo0
add 00200 deny ip from any to 127.0.0.0/8
.......etc.....

is this right? when i boot to these conditions, and ipfw show, i get
the set that appears when i set firewall_type="OPEN"

is this the proper format for rules in a static file?

regards to all!

stephen d. kingrea


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.4.21.0301220931310.19656-100000>