Date: Wed, 11 Feb 2015 02:43:58 +0000 (UTC) From: Cy Schubert <cy@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-10@freebsd.org Subject: svn commit: r278550 - stable/10/etc/rc.d Message-ID: <201502110243.t1B2hwMY082989@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: cy Date: Wed Feb 11 02:43:58 2015 New Revision: 278550 URL: https://svnweb.freebsd.org/changeset/base/278550 Log: MFC r277854: ipfilter 5.1.2 (vs 4.1.28 in previous releases of FreeBSD) stores IPv4 and IPv6 rules in a single table. ipf -6 -Fa will flush the whole table, including IPv4 rules. This patch removes the redundant ipf -I -6 -Fa statement. PR: 188318 Modified: stable/10/etc/rc.d/ipfilter Directory Properties: stable/10/ (props changed) Modified: stable/10/etc/rc.d/ipfilter ============================================================================== --- stable/10/etc/rc.d/ipfilter Wed Feb 11 02:02:56 2015 (r278549) +++ stable/10/etc/rc.d/ipfilter Wed Feb 11 02:43:58 2015 (r278550) @@ -65,7 +65,6 @@ ipfilter_reload() err 1 'Load of rules into alternate set failed; aborting reload' fi fi - ${ipfilter_program:-/sbin/ipf} -I -6 -Fa if [ -r "${ipv6_ipfilter_rules}" ]; then ${ipfilter_program:-/sbin/ipf} -I -6 \ -f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201502110243.t1B2hwMY082989>