Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 Mar 2010 09:11:32 -0500
From:      Martin McCormick <martin@dc.cis.okstate.edu>
To:        freebsd-questions@freebsd.org
Subject:   FreeBSD8.0 Firewall Script behaves much differently than 6.x
Message-ID:  <201003311411.o2VEBWwK091324@dc.cis.okstate.edu>

next in thread | raw e-mail | index | archive | help
	Is there a proper way to reset firewall rules in
FreeBSD8.0  ? I just discovered that if one is remotely logged
in and makes a change in the firewall rules, it is a disastor to
do something like

sh /etc/[firewall_rules_script]

	One could do that in FreeBSD6.x. When the rules flushed,
you lost your connection, but the script continued to execute
and the new rules were in effect immediately. Trying this same
reload in FreeBSD8.0, I knew something was horribly wrong when
everything just locked up. I logged on to a local console and ran

ipfw list

It had stopped right after the flush.

	Doing the same command from a local or even a serial
console works fine and the new rules are installed.

	Thanks and maybe I have been using the wrong technique
for reloading firewall rules all along.

Martin McCormick WB5AGZ  Stillwater, OK 
Systems Engineer
OSU Information Technology Department Telecommunications Services Group



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201003311411.o2VEBWwK091324>