Re: ipfw

From: Michael Lyngbøl (none@michael--lyngbol.dk.lh.bsd-dk.dk)
Date: Sun 08 Jul 2001 - 19:42:04 CEST


Date: Sun, 8 Jul 2001 19:42:04 +0200
From: Michael Lyngbøl <none@michael--lyngbol.dk.lh.bsd-dk.dk>
To: bsd-dk@bsd-dk.dk
Subject: Re: ipfw

On 08.07.2001 19:31:53 +0000, Jeppe Liisberg wrote:
> åh ja... lige een ting til... hvordan er det lige man "gemmer" sin konf,
> så den starter næste gang?

% grep firewall /etc/rc.conf
firewall_enable="YES" # Set to YES to enable firewall functionality
firewall_type="/usr/local/etc/ipfw.rules"

/usr/local/etc/ipfw.rules indeholder dine regler:

# flush everything! (take care!)
-f flush

add 100 pass all from any to any via lo0
add 200 deny all from any to 127.0.0.0/8

add count ip from any to any in recv fxp0
add count ip from any to any out xmit fxp0
...

/usr/local/etc/ipfw.rules giver du blot som argument til ipfw.

/Michael

-- 
Michael Lyngbøl -- michael at lyngbol dot dk
TDC Tele Danmark, DataNetworks, IP section



This archive was generated by hypermail 2b30 : Wed 15 Nov 2006 - 18:24:12 CET