On 2005-12-15 15:07, Valmir Filho <valmir@wbrnet.com.br> wrote:
> Doc,
>
> Readign FreeBSD's Hankbook, specifically the IPFW chapter
> (http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html),
> i've found that the following:
>
> 25.6.3 /etc/rc.conf Options
>
> If you do not have IPFW ...
>
> firewall_enable="YES"
>
> Set the script to run to activate your rules:
>
> firewall_script="/etc/ipfw.rules"
>
> My observation is:
>
> Reading /etc/rc.firewall script i?ve found that the above line
> (firewall_script="/etc/ipfw.rules") must be changed to "firewall_type"
> and not "firewall_script".
Just to clarify this a bit more:
As Tom Rhodes has already explained, the firewall_script option
is different from firewall_type. Their difference is relatively
subtle, but it is described in the rc.conf(5) manpage:
firewall_script
(str) This variable specifies the full path to
the firewall script to run. The default is
/etc/rc.firewall.
firewall_type
(str) Names the firewall type from the selection
in /etc/rc.firewall, or the file which contains
the local firewall ruleset. Valid selections
from /etc/rc.firewall are:
open unrestricted IP access
closed all IP services disabled, except via ``lo0''
client basic protection for a workstation
simple basic protection for a LAN.
If a filename is specified, the full path must
be given.
The rest of the Handbook chapter is written in a style that
bypasses the pre-canned firewall rulesets of rc.firewall, using a
custom shell script that runs ipfw directly, so firewall_script
is correct there.
So we don't need to change anything there, for now. Thanks for
your willingness to help us improving the docs though. Please
keep submitting anything you notice that needs to be fixed :)
- Giorgos
_______________________________________________
freebsd-doc@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-doc
To unsubscribe, send any mail to "freebsd-doc-unsubscribe@freebsd.org"