IPFW rule sets and automatic rule numbering

Freddie Cash fjwcash at gmail.com
Wed Sep 17 14:58:48 UTC 2014


Just to summarise everything:

1.  Automatic rule numbering works beautifully if you only ever use the
default rule set (set 0).  Meaning, if you don't use any set commands at
all.

2.  If you manually number every rule, then using rule sets works
beautifully.

3.  Doing a little set manipulation allows you to load updated rules
without disconnecting anyone or dropping any packets:
  disable set 1
  load rules into set 1
  enable set 1
  swap set 1 0
  disable set 1

I understand how everything works a little bit better now.  Thanks for all
the help and pointers and discussion.

-- 
Freddie Cash
fjwcash at gmail.com


More information about the freebsd-ipfw mailing list