RESET FIREWALL WITHOUT REBOOT

2003-07-13 Thread RYAN vAN GINNEKEN
hello group

I need to know how to stop and start my firewall rules without resetting my computer 
as I am on ADSL and have a dynamic ip that I do not want to change.  seems to change 
mostly when I reboot mostly.

so here is the dilemma I run bind apache bincimap postfix and a few others it is my 
only server right now and it cant go down because if I do not get my clients emails I 
go bankrupt.

I what to set up a firewall and have compiled the necessary items into the kernel
did this when I first set up my system many reboots ago
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPDIVERT

I have created a file called rc.fw4
and I have set my rc.conf 

#ipv4 firewall
firewall_enable=YES
firewall_type=/etc/rc.fw4
firewall_script=/etc/rc.firewall
firewall_quiet=NO

IS THERE A WAY ACTIVATE ALL THIS WITHOUT A REBOOT
ALSO IS THERE A WAY DE-ACTIVATE ALL THIS WITHOUT A REBOOT IN CASE SOMETHING GOES WRONG 
WHICH USUALLY DOES WITH MY FIREWALL RULES


www.computerking.ca QUALITY and SERVICE first.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RESET FIREWALL WITHOUT REBOOT

2003-07-13 Thread Jonas Anderson
On Sun, 13 Jul 2003, RYAN vAN GINNEKEN wrote:

 IS THERE A WAY ACTIVATE ALL THIS WITHOUT A REBOOT

ipfw /path/to/firewall.rules.file

 ALSO IS THERE A WAY DE-ACTIVATE ALL THIS WITHOUT A REBOOT IN CASE
 SOMETHING GOES WRONG WHICH USUALLY DOES WITH MY FIREWALL RULES

ipfw flush

Regards,

-- 
-Jonas
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RESET FIREWALL WITHOUT REBOOT

2003-07-13 Thread Kent Stewart
On Sunday 13 July 2003 11:41 am, RYAN vAN GINNEKEN wrote:
 hello group

 I need to know how to stop and start my firewall rules without
 resetting my computer as I am on ADSL and have a dynamic ip that I do
 not want to change.  seems to change mostly when I reboot mostly.

 so here is the dilemma I run bind apache bincimap postfix and a few
 others it is my only server right now and it cant go down because if
 I do not get my clients emails I go bankrupt.

 I what to set up a firewall and have compiled the necessary items
 into the kernel did this when I first set up my system many reboots
 ago
 options IPFIREWALL
 options IPFIREWALL_VERBOSE
 options IPDIVERT

 I have created a file called rc.fw4
 and I have set my rc.conf

 #ipv4 firewall
 firewall_enable=YES
 firewall_type=/etc/rc.fw4
 firewall_script=/etc/rc.firewall
 firewall_quiet=NO

 IS THERE A WAY ACTIVATE ALL THIS WITHOUT A REBOOT
 ALSO IS THERE A WAY DE-ACTIVATE ALL THIS WITHOUT A REBOOT IN CASE
 SOMETHING GOES WRONG WHICH USUALLY DOES WITH MY FIREWALL RULES

Before I would start testing new rules on a remote machine, I would at 
the following script for something like 10 minutes in the future. That 
way if I couldn't do anything, in 10 minutes everything would be reset. 
If everything worked, it let me cancel the at. 

I called it clnipfw and it looks like

# cat clnipfw
#! /bin/sh
ipfw -f flush
ipfw add divert natd all from any to any via ep0
ipfw add pass all from any to any

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]