Date: Fri, 23 Sep 2005 20:49:47 +0200 From: G Bryant <gbryant@roamingsolutions.net> To: scuba@centroin.com.br Cc: freebsd-ipfw@freebsd.org Subject: Re: Enable ipfw without rebooting Message-ID: <43344E4B.9060700@roamingsolutions.net> In-Reply-To: <Pine.BSI.4.33.0509231307470.20428-100000@hypselo.centroin.com.br> References: <Pine.BSI.4.33.0509231307470.20428-100000@hypselo.centroin.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
You could use ipfw sets and disable the sets at the start of the script - excluding the pass-thru rules. My rc.firewall script disables all the scripts and only enables the ones I want. I can then run scripts from cron to enable/ disable any sets I like. You can load all the rules you want into sets that are disabled, and then you can enable them at will. That's one suggestion - although I did see a command somewhere to disable ipfw at runtime. man ipfw Regards, Graham scuba@centroin.com.br wrote: >Hi all, > > What is the best way to enable/disable ipfw on a FBSD 5.x box, >without reboot? > > I.e. If I have a box that booted with 'firewall_enable="NO"' in >rc.conf, how can I enable it without reboot? > >Thank you, > >- Marcelo > > >_______________________________________________ >freebsd-ipfw@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" > > > >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?43344E4B.9060700>