Date: Mon, 03 Jan 2005 17:00:16 -0600 From: Paul Schmehl <pauls@utdallas.edu> To: Eric F Crist <ecrist@secure-computing.net> Cc: FreeBSD-Questions Questions <freebsd-questions@freebsd.org> Subject: Re: my lame attempt at a shell script... Message-ID: <7C6BEBEDE2DB4AC7E55D6843@utd49554.utdallas.edu> In-Reply-To: <AB283AB4-5DD9-11D9-B56F-000D9333E43C@secure-computing.net> References: <06DDB71C-5DB4-11D9-B56F-000D9333E43C@secure-computing.net> <15416223037.20050103193803@hexren.net> <6074EB8D-5DC6-11D9-89A5-000D93AD26C8@tntluoma.com> <F0BE3E23-5DC8-11D9-B56F-000D9333E43C@secure-computing.net> <41D9BA53.4060105@locolomo.org> <2DF07A46-5DD2-11D9-89A5-000D93AD26C8@tntluoma.com> <D7D0CFB3-5DD5-11D9-B56F-000D9333E43C@secure-computing.net> <3E8DD18E8557227C2A3C8E5A@utd49554.utdallas.edu> <AB283AB4-5DD9-11D9-B56F-000D9333E43C@secure-computing.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--On Monday, January 03, 2005 04:49:04 PM -0600 Eric F Crist <ecrist@secure-computing.net> wrote: > > By on-the-fly, I meant by manually typing in a new rule on the command > line. From there, I'd take the output of ipfw show and figure out where > I want that rule placed. So, for the purposes of this script, I just > want it to add new rules at an interval of 50. Within the script, > different sets of rules will be grouped by the 10000, but I'll worry > about that vailidation on my own. The syntax is where my limitations lie. > In that case write to a ruleset. Keep in mind that you want to not only add the rule on the fly, but you also want it implemented should the server be rebooted or the firewall be restarted. All you have to do is write the rule to the next line of the ruleset and disable and enable the ruleset and you're done. Much easier than trying to figure out what number to add and you've killed both birds with the same stone. Paul Schmehl (pauls@utdallas.edu) Adjunct Information Security Officer The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?7C6BEBEDE2DB4AC7E55D6843>