Attachment 62779 Details for Bug 93764 – ipfw.diff

[patch] ipfw.diff

ipfw.diff (text/plain), 1.94 KB, created by Daniel Gerzo on 2006-02-23 19:20:04 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Gerzo

Created: 2006-02-23 19:20:04 UTC

Size: 1.94 KB

patch

obsolete

>--- /usr/home/danger/doc/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml.orig	Wed Feb 15 18:10:07 2006
>+++ /usr/home/danger/doc/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml	Wed Feb 22 10:00:23 2006
>@@ -2283,7 +2283,50 @@
> 
>       <para>Set the script to run to activate your rules:</para>
> 
>-      <programlisting>firewall_script="/etc/ipfw.rules"</programlisting>
>+      <programlisting>firewall_script="/etc/rc.firewall"</programlisting>
>+
>+      <para>Set the type of firewall.  This enables a simple pre-set
>+	ruleset for <application>IPFW</application>:</para>
>+      
>+      <programlisting>firewall_type="open"</programlisting>
>+
>+      <para>Available values for this setting are:</para>
>+
>+      <itemizedlist>
>+	<listitem>
>+	  <para><literal>open</literal> &mdash; allow anyone in.</para>
>+	</listitem>
>+	<listitem>
>+	  <para><literal>client</literal> &mdash; will protect only this
>+	    machine.</para>
>+	</listitem>
>+	<listitem>
>+	  <para><literal>simple</literal> &mdash; protect the whole
>+	    network.</para>
>+	</listitem>
>+	<listitem>
>+	  <para><literal>closed</literal> &mdash; entirely disables IP
>+	    services except via lo0 interface.</para>
>+	</listitem>
>+	<listitem>
>+	  <para><literal>UNKNOWN</literal> &mdash; disables the loading
>+	    of firewall rules.</para>
>+	</listitem>
>+	<listitem>
>+	  <para><replaceable>filename</replaceable> &mdash; will load the rules
>+	    in the given filename (full path required).</para>
>+	</listitem>
>+      </itemizedlist>
>+
>+      <note>
>+	<para>If <literal>firewall_type</literal> is set either to
>+	  <literal>client</literal> or <literal>simple</literal>, the
>+	  default rules found in <filename>/etc/rc.firewall</filename>
>+	  should be reviewed to fit to the setup of the given machine.
>+	  Also note, that the examples used in this chapter expect that
>+	  the <literal>firewall_type</literal> is set to
>+	  <filename>/etc/ipfw.rules</filename>.</para>
>+      </note>
> 
>       <para>Enable logging:</para>

Actions: View | Diff

Attachments on bug 93764: 62779