From owner-freebsd-questions  Wed Jun 16 21:11:35 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from WEBBSD1.turnaround.com.au (webbsd1.turnaround.com.au [203.39.138.49])
	by hub.freebsd.org (Postfix) with ESMTP id 010F614EB8
	for <freebsd-questions@FreeBSD.ORG>; Wed, 16 Jun 1999 21:11:29 -0700 (PDT)
	(envelope-from ajohns@TurnAround.com.au)
Received: from tasajohns (dhcp64.turnaround.com.au [192.168.1.64])
	by WEBBSD1.turnaround.com.au (8.8.7/8.8.7) with SMTP id OAA28747;
	Thu, 17 Jun 1999 14:27:09 +1000 (EST)
	(envelope-from ajohns@TurnAround.com.au)
From: "Andrew Johns" <ajohns@TurnAround.com.au>
To: "Brian Gallucci" <noc@expnet.net>,
	"Alfred Perlstein" <bright@rush.net>
Cc: "FreeBSD" <freebsd-questions@FreeBSD.ORG>
Subject: RE: Firewall Rules
Date: Thu, 17 Jun 1999 14:10:33 +1000
Message-ID: <001701beb877$5848af10$4001a8c0@tasajohns.turnaround.com.au>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
In-Reply-To: <002b01beb870$bf5f62e0$51f51c0a@expnet.net>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Yeah - at the start of rc.firewall it flushes the rules again _unless_
you have firewall_quiet=YES defined (usually done in rc.conf), so the
first command (the flush) worked ok, but the flush _inside_ rc.firewall
_then_ disconnected you...

Change rc.firewall to default to quiet unless otherwise specified.

eg: pseuodo-code something like:
if firewall_verbose = YES then
	fwcmd = ipfw
else
	fwcmd = ipfw -q
end

That way, if you forget, it won't matter....

Otherwise, using the original command you had:
firewall_quiet=YES; sh rc.firewall

Note that you don't need the ipfw flush here as it's done inside
rc.firewall anyway, which was the gotchya you experienced... ;)

HTH

> -----Original Message-----
> From: owner-freebsd-questions@FreeBSD.ORG
> [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of
> Brian Gallucci
> Sent: Thursday, 17 June 1999 13:23
> To: Andrew Johns; Alfred Perlstein
> Cc: FreeBSD
> Subject: Re: Firewall Rules
>
>
> It just locked me out I had to reload them at the console..
> Anymore ideas ?
>
> Thanks
>

[snip]

Regards



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message