Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 4 Oct 2001 06:58:25 +0200
From:      "Benedikt Schmidt" <ry102@rz.uni-karlsruhe.de>
To:        freebsd-questions@FreeBSD.ORG
Subject:   Re: more rc.conf troubles
Message-ID:  <20011004065825.C28910@wn4-marvin.wn4.uni-karlsruhe.de>
In-Reply-To: <20011004004032.501488e2.nmace85@yahoo.com>
References:  <20011003204158.3b538dfd.nmace85@yahoo.com> <003501c14c6d$2919fdc0$14ce21c7@avatar.com> <20011003214710.318de708.nmace85@yahoo.com> <20011003205355.L8391@blossom.cjclark.org> <20011004004032.501488e2.nmace85@yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Nathan Mace <nmace85@yahoo.com> wrote:
> i've included my ipfw.rules file...for some reason i tend to thing the
> problem is with it...i saw in the rc.firewall file that they kept using
> $fwcmd in front of the rules....do i have to use that in my rules file? 
> why?  what is it?  
firewall_script is a shell script executed by rc.network. ipfw(8) is 
the control program for ipfirewall(4). If you look at the default
/etc/rc.firewall, you can see that ${fwcmd} is set to "/sbin/ifw" or
"/sbin/ipfw -q" depending on the value of firewall_quiet in the rc.conf
files.

So you could change your "firewall script":

,----
| fwcmd="/sbin/ipfw"
| ${fwcmd} add 65000 pass all from any to any
`----

or just use the following lines in rc.conf.

,----[ /etc/rc.conf ]
| firewall_enable="YES"
| firewall_script="/etc/rc.firewall"
| firewall_type="open"
`----

-- 
Benedikt

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011004065825.C28910>