Date: Tue, 18 Feb 2003 21:12:03 -0800 From: "Aaron Burke" <aburke@nullplusone.com> To: <freebsd-questions@FreeBSD.ORG> Subject: RE: IPFW: rc.firewall script doesn't load when loading rules from a file Message-ID: <AMEMKJNMFLJCJDLFIEDBKEKBCGAA.aburke@nullplusone.com> In-Reply-To: <A588EF8C-439B-11D7-8842-00306555B1FA@seanet.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> -----Original Message----- > From: owner-freebsd-questions@FreeBSD.ORG > [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Jason Williams > Sent: Tuesday, February 18, 2003 3:50 PM > To: freebsd-questions@FreeBSD.ORG > Subject: IPFW: rc.firewall script doesn't load when loading rules from a > file > > > I'm using FBSD 4.7 and have compiled ipfw into the kernel. My rc.conf > file has the following: > > firewall_enable="YES" > firewall_script="/etc/rc.firewall" > firewall_type="/etc/ipfw.rules" I am not sure how your situation is different than most, but I use firewall_type="OPEN" instead of "/etc/ipfw.rules". The other options will be listed in the file /etc/rc.firewall . You may want to look at the following in the freebsd handbook. http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html > firewall_quiet="NO" > firewall_logging_enable="YES" > log_in_vain="YES" > icmp_drop_redirect="YES" > > On reboot, ipfw is not reading rc.firewall before loading my rules - > /etc/ipfw.rules - as I've assumed it would. I thought I could let > rc.firewall take care of housekeeping ( flush and loopback rules ) > before moving on to the the custom rules in ipfw.rules. Am I missing > something here or is it normal to bypass rc.firewall altogether and set > up a rules file with everything needed in there? All the tutorials seem > to suggest that ipfw reads rc.firewall first before moving onto custom > rules files, but that has not been my experience here. Thanks for your > help > > Jason Williams > jason@seanet.com > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AMEMKJNMFLJCJDLFIEDBKEKBCGAA.aburke>