Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Oct 2000 02:17:08 +0900
From:      horio shoichi <horio@acm.org>
To:        "freebsd-security@FreeBSD.ORG" <freebsd-security@FreeBSD.ORG>
Subject:   Re: Default Deny
Message-ID:  <200010091718.e99HI2f07206@ogyo.pointer-software.com>
References:  <200010060056.LAA11152@cairo.anu.edu.au> <39DCC1CB.5FDD7F90@allmaui.com> <20001006204807.M31338@speedy.gsinet> <39DE8D1B.923D86DF@allmaui.com> <20001007171153.P31338@speedy.gsinet>

next in thread | previous in thread | raw e-mail | index | archive | help
Gerhard Sittig wrote:
> 
> 
> > I use this to reload my settings after changes
> >
> > #!/bin/sh
> > ipf -D
> > ipf -Fa -f /etc/ipf.conf -E
> > ipnat -CF -f /etc/ipnat.conf
> 
> I would prefer something like
> 
> ipf -I -Fa -f /etc/ipf.conf -v
> ( ipf -s; sleep 60; ipf -s; ) &
> # heavy testing until the prompt returns
> ipf -s   # only when you're happy with what the test showed
> 

Here is my preference.

ipf -IFa -If ./ipf.rules >errors 2>&1
cat errors
test ! -s errors && { rm errors ; ipf -s ; }


horio shoichi


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200010091718.e99HI2f07206>