13 rcvar="ipfilter_enable"
15 stop_precmd="test -f ${ipfilter_rules} -o -f ${ipv6_ipfilter_rules}"
17 start_precmd="$stop_precmd"
18 start_cmd="ipfilter_start"
19 stop_cmd="ipfilter_stop"
20 reload_precmd="$stop_precmd"
21 reload_cmd="ipfilter_reload"
22 resync_precmd="$stop_precmd"
23 resync_cmd="ipfilter_resync"
24 status_precmd="$stop_precmd"
25 status_cmd="ipfilter_status"
26 extra_commands="reload resync"
27 required_modules="ipl:ipfilter"
31 echo "Enabling ipfilter."
32 if ! ${ipfilter_program:-/sbin/ipf} -V | grep -q 'Running: yes'; then
33 ${ipfilter_program:-/sbin/ipf} -E
35 ${ipfilter_program:-/sbin/ipf} -Fa
36 if [ -r "${ipfilter_rules}" ]; then
37 ${ipfilter_program:-/sbin/ipf} \
38 -f "${ipfilter_rules}" ${ipfilter_flags}
40 if [ -r "${ipv6_ipfilter_rules}" ]; then
41 ${ipfilter_program:-/sbin/ipf} -6 \
42 -f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
48 if ${ipfilter_program:-/sbin/ipf} -V | grep -q 'Running: yes'; then
49 echo "Saving firewall state tables"
50 ${ipfs_program:-/sbin/ipfs} -W ${ipfs_flags}
51 echo "Disabling ipfilter."
52 ${ipfilter_program:-/sbin/ipf} -D
58 echo "Reloading ipfilter rules."
60 ${ipfilter_program:-/sbin/ipf} -I -Fa
61 if [ -r "${ipfilter_rules}" ]; then
62 ${ipfilter_program:-/sbin/ipf} -I \
63 -f "${ipfilter_rules}" ${ipfilter_flags}
65 err 1 'Load of rules into alternate set failed; aborting reload'
68 ${ipfilter_program:-/sbin/ipf} -I -6 -Fa
69 if [ -r "${ipv6_ipfilter_rules}" ]; then
70 ${ipfilter_program:-/sbin/ipf} -I -6 \
71 -f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
73 err 1 'Load of IPv6 rules into alternate set failed; aborting reload'
76 ${ipfilter_program:-/sbin/ipf} -s
82 ${ipfilter_program:-/sbin/ipf} -y ${ipfilter_flags}
87 ${ipfilter_program:-/sbin/ipf} -V