Re: strange problem with ipfw and rc.conf
Thanks.
I don't think it was the problem of ipfw rulesets. In
fact once I did "sh /etc/ipfw.rules" and things are
fine. I just cant figure out why the rc.conf won't
load the rulesets.
Besides, I recompiled the customized kernel and there
is no need for "firewall_enable="YES"" statement in
rc.conf.
--- Arne Woerner <arne_woerner@yahoo.com> wrote:
> --- gahn <ipfreak@yahoo.com> wrote:
> > 65335 locking out everything). I have to do "sh
> > /etc/ipfw.rules" in order to load the rulesets,
> once I
> > did that, I can access the box from remote
> locations
> >
> Hmm...
>
> It helped me, to look at /etc/rc.firewall... There
> are some
> comments, that might give u the right hints...
>
> Maybe firewall_enable should be YES?
>
> E. g. my /etc/rc.firewall.bartely file cannot be
> executed with
> sh... But maybe I still did not understand ipfw...
>
> My /etc/rc.firewall.bartely contains rules like:
> add pass log all from any to 47.11.42.42
> add deny log all from any to any
>
> And in rc.conf my
> firewall_type=/etc/rc.firewall.bartleby
>
> And I use default firewall_script=/etc/rc.firewall
>
> -Arne
>
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam
> protection around
> http://mail.yahoo.com
>
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
討論串 (同標題文章)
完整討論串 (本文為第 4 之 10 篇):