On Wednesday, May 29, 2002, at 12:46 PM, Ian wrote:

> Have a look at /etc/rc.firewall and see if one of the standard named
> configurations it supports is right for you.  If so, set it in 
> firewall_type
> in rc.conf.  Otherwise use firewall_type="/etc/ipfw.conf" and put your 
> own
> ruleset into that file (which won't get clobbered on upgrades).

This thread is questionably still on -stable, but wouldn't it make more 
sense to set firewall_script to your ruleset file instead of 
firewall_type?

ie, I use:

firewall_enable="YES"
firewall_script="/etc/rc.firewall.local"

Setting firewall_type to a file name will just ensure that no rules are 
added at all, it won't match any cases in /etc/rc.firewall.

Bryan


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message

Reply via email to