blob: 0a590410b1054f9aa39995e65a64c8b13e90e0f7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
#!/bin/sh
#
# $NetBSD: ipfilter,v 1.18 2009/03/23 18:52:02 hannken Exp $
#
# PROVIDE: ipfilter
# REQUIRE: root bootconf mountcritlocal tty
$_rc_subr_loaded . /etc/rc.subr
name="ipfilter"
rcvar=$name
start_precmd="ipfilter_prestart"
start_cmd="ipfilter_start"
stop_precmd="test -f /etc/ipf.conf -o -f /etc/ipf6.conf"
stop_cmd="ipfilter_stop"
reload_precmd="$stop_precmd"
reload_cmd="ipfilter_reload"
resync_precmd="$stop_precmd"
resync_cmd="ipfilter_resync"
status_precmd="$stop_precmd"
status_cmd="ipfilter_status"
extra_commands="reload resync status"
ipfilter_prestart()
{
if [ ! -f /etc/ipf.conf ] && [ ! -f /etc/ipf6.conf ]; then
warn "/etc/ipf*.conf not readable; ipfilter start aborted."
stop_boot
return 1
fi
return 0
}
ipfilter_start()
{
echo "Enabling ipfilter."
/sbin/ipf ${rc_flags} -E
# Do the flush first; since older ipf has different semantics.
#
if [ -f /etc/ipf.conf ]; then
/sbin/ipf -Fa
fi
if [ -f /etc/ipf6.conf ]; then
/sbin/ipf -6 -Fa
fi
# Now load the config files
#
if [ -f /etc/ipf.conf ]; then
/sbin/ipf -f /etc/ipf.conf
fi
if [ -f /etc/ipf6.conf ]; then
/sbin/ipf -6 -f /etc/ipf6.conf
fi
}
ipfilter_stop()
{
echo "Disabling ipfilter."
/sbin/ipf -D
}
ipfilter_reload()
{
echo "Reloading ipfilter rules."
# Do the flush first; since older ipf has different semantics.
#
if [ -f /etc/ipf.conf ]; then
/sbin/ipf -I -Fa
fi
if [ -f /etc/ipf6.conf ]; then
/sbin/ipf -6 -I -Fa
fi
# Now load the config files into the Inactive set
#
if [ -f /etc/ipf.conf ] && ! /sbin/ipf -I -f /etc/ipf.conf; then
err 1 "reload of ipf.conf failed; not swapping to new ruleset."
fi
if [ -f /etc/ipf6.conf ] && ! /sbin/ipf -I -6 -f /etc/ipf6.conf; then
err 1 "reload of ipf6.conf failed; not swapping to new ruleset."
fi
# Swap in the new rules
#
/sbin/ipf -s
}
ipfilter_resync()
{
/sbin/ipf -y
}
ipfilter_status()
{
/sbin/ipf -V
}
load_rc_config $name
run_rc_command "$1"
|
