Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 May 2002 00:22:46 -0400
From:      Bryan Fullerton <bryanf@samurai.com>
To:        freebsd-stable <freebsd-stable@freebsd.org>
Subject:   Re: Server won't boot after recompile the kernel with ipfw support
Message-ID:  <E48F6C93-7384-11D6-AA23-0003936377F0@samurai.com>
In-Reply-To: <B91A61E7.D64D%freebsd@damnhippie.dyndns.org>

next in thread | previous in thread | raw e-mail | index | archive | help

On Wednesday, May 29, 2002, at 12:46 PM, Ian wrote:

> Have a look at /etc/rc.firewall and see if one of the standard named
> configurations it supports is right for you.  If so, set it in 
> firewall_type
> in rc.conf.  Otherwise use firewall_type="/etc/ipfw.conf" and put your 
> own
> ruleset into that file (which won't get clobbered on upgrades).

This thread is questionably still on -stable, but wouldn't it make more 
sense to set firewall_script to your ruleset file instead of 
firewall_type?

ie, I use:

firewall_enable="YES"
firewall_script="/etc/rc.firewall.local"

Setting firewall_type to a file name will just ensure that no rules are 
added at all, it won't match any cases in /etc/rc.firewall.

Bryan


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E48F6C93-7384-11D6-AA23-0003936377F0>