running 4.7 with firewall, natd enabled kernel. i wish to create firewall
rules outside of the rc.firewall script that remain static across
reboots. to that end, i created a set (rc.firewall.rules), pointing
rc.conf to that set:

firewall_enable="YES"
firewall_type="/etc/rc.firewall.rules"
natd_enable="YES".....etc....

/etc/rc.firewall.rules lines are in the format:

add 00100 all ip from any to any via lo0
add 00200 deny ip from any to 127.0.0.0/8
.......etc.....

is this right? when i boot to these conditions, and ipfw show, i get
the set that appears when i set firewall_type="OPEN"

is this the proper format for rules in a static file?

regards to all!

stephen d. kingrea


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

Reply via email to