securelevel and ipfw
Igor Popov
igorpopov at newmail.ru
Thu May 25 05:23:32 PDT 2006
Hi, all!
I use FreeBSD 4.11-RELEASE-p16 with ipfw2, now machine is running in
securelevel mode:
# sysctl kern.securelevel
kern.securelevel: 1
and I can't reload ipfw rules from remote machine, as usually I do
ipfw disable firewall
/etc/firewall.sh
ipfw enable firewall
As you can guess the first rule in firewall.sh is ipfw -f flush.
but now I can't, cause on
# sysctl -w net.inet.ip.fw.enable=0
net.inet.ip.fw.enable: 1
sysctl: net.inet.ip.fw.enable: Operation not permitted
But, when I do /etc/rc.d/ipfw restart on FreeBSD 6.0 or 6.1 that is in the
same securelevel (1) it works.
--
All I kin say is when you finds yo'self wanderin' in a peach orchard,
ya don't go lookin' for rutabagas.
-- Kingfish
More information about the freebsd-ipfw
mailing list