strange problem with ipfw and rc.conf
gahn
ipfreak at yahoo.com
Thu Jan 26 16:22:58 PST 2006
Thanks.
I don't think it was the problem of ipfw rulesets. In
fact once I did "sh /etc/ipfw.rules" and things are
fine. I just cant figure out why the rc.conf won't
load the rulesets.
Besides, I recompiled the customized kernel and there
is no need for "firewall_enable="YES"" statement in
rc.conf.
--- Arne Woerner <arne_woerner at yahoo.com> wrote:
> --- gahn <ipfreak at yahoo.com> wrote:
> > 65335 locking out everything). I have to do "sh
> > /etc/ipfw.rules" in order to load the rulesets,
> once I
> > did that, I can access the box from remote
> locations
> >
> Hmm...
>
> It helped me, to look at /etc/rc.firewall... There
> are some
> comments, that might give u the right hints...
>
> Maybe firewall_enable should be YES?
>
> E. g. my /etc/rc.firewall.bartely file cannot be
> executed with
> sh... But maybe I still did not understand ipfw...
>
> My /etc/rc.firewall.bartely contains rules like:
> add pass log all from any to 47.11.42.42
> add deny log all from any to any
>
> And in rc.conf my
> firewall_type=/etc/rc.firewall.bartleby
>
> And I use default firewall_script=/etc/rc.firewall
>
> -Arne
>
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam
> protection around
> http://mail.yahoo.com
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
More information about the freebsd-security
mailing list