kldload ipfw, with IPFIREWALL_DEFAULT_TO_ACCEPT
Karl Pielorz
kpielorz_lst at tdx.co.uk
Mon Jul 29 11:27:39 UTC 2013
--On 29 July 2013 13:02 +0200 Stefan Esser <se at freebsd.org> wrote:
> I guess you were looking for:
>
> net.inet.ip.fw.default_to_accept="1"
>
> which is a tunable to be set in /boot/loader.conf ...
Very probably - but that's at boot time :( - Is there nothing I can do at
kldload time to have the initial kldload give me a 'allow ip from any to
any' rule as it loads? (thus not affecting traffic on the machine, or more
importantly the CARP interfaces)?
-Karl
More information about the freebsd-hackers
mailing list