View | Details | Raw Unified | Return to bug 130555
Collapse All | Expand All

(-)etc.new/defaults/rc.conf (+1 lines)
Lines 152-157 Link Here
152
ipfilter_rules="/etc/ipf.rules"	# rules definition file for ipfilter, see
152
ipfilter_rules="/etc/ipf.rules"	# rules definition file for ipfilter, see
153
				# /usr/src/contrib/ipfilter/rules for examples
153
				# /usr/src/contrib/ipfilter/rules for examples
154
ipfilter_flags=""		# additional flags for ipfilter
154
ipfilter_flags=""		# additional flags for ipfilter
155
ipfilter_variables=""		# <optionlist> for -T, see ipf(8)
155
ipnat_enable="NO"		# Set to YES to enable ipnat functionality
156
ipnat_enable="NO"		# Set to YES to enable ipnat functionality
156
ipnat_program="/sbin/ipnat"	# where the ipnat program lives
157
ipnat_program="/sbin/ipnat"	# where the ipnat program lives
157
ipnat_rules="/etc/ipnat.rules"	# rules definition file for ipnat
158
ipnat_rules="/etc/ipnat.rules"	# rules definition file for ipnat
(-)etc.new/rc.d/ipfilter (+8 lines)
Lines 30-35 Link Here
30
ipfilter_start()
30
ipfilter_start()
31
{
31
{
32
	echo "Enabling ipfilter."
32
	echo "Enabling ipfilter."
33
	if [ ! -z "${ipfilter_variables}" ]; then
34
		# Can set ipfilter variables only when it is disabled,
35
		# which flushes filter and nat rules
36
		if [ `sysctl -n net.inet.ipf.fr_running` -gt 0 ]; then
37
			${ipfilter_program:-/sbin/ipf} -D
38
		fi
39
		${ipfilter_program:-/sbin/ipf} -T "${ipfilter_variables}"
40
	fi
33
	if [ `sysctl -n net.inet.ipf.fr_running` -le 0 ]; then
41
	if [ `sysctl -n net.inet.ipf.fr_running` -le 0 ]; then
34
		${ipfilter_program:-/sbin/ipf} -E
42
		${ipfilter_program:-/sbin/ipf} -E
35
	fi
43
	fi

Return to bug 130555