<programlisting>firewall_script="/etc/ipfw.rules"</programlisting>

      <programlisting>firewall_script="/etc/rc.firewall"</programlisting>

      <para>Set the type of firewall.  This enables a simple pre-set

	ruleset for <application>IPFW</application>:</para>

      <programlisting>firewall_type="open"</programlisting>

      <para>Available values for this setting are:</para>

      <itemizedlist>

	<listitem>

	  <para><literal>open</literal> &mdash; allow anyone in.</para>

	</listitem>

	<listitem>

	  <para><literal>client</literal> &mdash; will protect only this

	    machine.</para>

	</listitem>

	<listitem>

	  <para><literal>simple</literal> &mdash; protect the whole

	    network.</para>

	</listitem>

	<listitem>

	  <para><literal>closed</literal> &mdash; entirely disables IP

	    services except via lo0 interface.</para>

	</listitem>

	<listitem>

	  <para><literal>UNKNOWN</literal> &mdash; disables the loading

	    of firewall rules.</para>

	</listitem>

	<listitem>

	  <para><replaceable>filename</replaceable> &mdash; will load the rules

	    in the given filename (full path required).</para>

	</listitem>

      </itemizedlist>

      <note>

	<para>If <literal>firewall_type</literal> is set either to

	  <literal>client</literal> or <literal>simple</literal>, the

	  default rules found in <filename>/etc/rc.firewall</filename>

	  should be reviewed to fit to the setup of the given machine.

	  Also note, that the examples used in this chapter expect that

	  the <literal>firewall_type</literal> is set to

	  <filename>/etc/ipfw.rules</filename>.</para>

      </note>