The following reply was made to PR bin/153252; it has been noted by GNATS. From: Eugene Grosbein <[email protected]> To: [email protected] Cc: [email protected] Subject: Re: bin/153252: [ipfw][patch] ipfw lockdown system in subsequent call of "/etc/rc.d/ipfw start" Date: Sat, 18 Dec 2010 02:38:45 +0600
1. > # check if firewall already running to prevent subsequent start calls One should not unconditionally disable ability of reloading ipfw rules using "/etc/rc.d/ipfw start" command. For example, it's used extensively in my systems and does not lead to "lock-down". One should learn ipfw(8) manual page including CHECKLIST paragraph and make oneself familiar with proper ways of reloading ipfw over network. 2. Nice catch. However, that's only one of reasons why it is very bad habit to have "./" in PATH. 3. Please use "diff -u" to make unified diffs, they are much easier to read. Eugene Grosbein _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-bugs To unsubscribe, send any mail to "[email protected]"
