OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
IPFW compiled in kernel: Where is it reading the config?

From: W. D. (WDUS-Webmasters.com)
Date: Thu Dec 13 2007 - 01:44:46 CST


Hi peeps,

After compiling ipfw into the new 6.2 kernel, and typing "ipfw list",
all I get is:

  "65535 deny ip from any to any"

From reading the docs, this might indicate that this is the
default rule. (I am certainly protected this way--but can't
be very productive ;^) )

By the way, when I run "man ipfw" I get nothing. Using this
instead: http://www.hmug.org/man/8/ipfw.php How to install
the man pages?

How do I tell where ipfw is reading its config from? Is
there a default config file?

The config file locaton that I specify in rc.conf doesn't
appear to be being used:

   firewall_script="/usr/local/etc/ipfw.rules"

What is the proper name for the ipfw ruleset file? Some
on the Web say that it is "ipfw.rules". Other say
it is "rc.firewall"

What is the proper location for the ruleset file? I see
all of the following:

   /etc/ipfw.rules
   /usr/local/etc/ipfw.rules

   /etc/rc.firewall
   /usr/local/etc/psa/modules/firewall/rc.firewall

Are line numbers required? I see some examples that use line
numbers and some do not.

Is there a program to easily "syntax check" a config/ruleset
file?

How do I tell if ipfw is running? "ps aux | grep ipfw"
doesn't show anything.

I would really appreciate very much some help with this. Many
thanks if you can help.

Start Here to Find It Fast!™ -> http://www.US-Webmasters.com/best-start-page/
$8.77 Domain Names -> http://domains.us-webmasters.com/

_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"