15 stop_precmd="test -f ${ipfilter_rules} -o -f ${ipv6_ipfilter_rules}"
17 start_precmd="$stop_precmd"
18 start_cmd="ipfilter_start"
19 stop_cmd="ipfilter_stop"
20 reload_precmd="$stop_precmd"
21 reload_cmd="ipfilter_reload"
22 resync_precmd="$stop_precmd"
23 resync_cmd="ipfilter_resync"
24 status_precmd="$stop_precmd"
25 status_cmd="ipfilter_status"
26 extra_commands="reload resync status"
27 required_modules="ipl:ipfilter"
31 echo "Enabling ipfilter."
32 if [ `sysctl -n net.inet.ipf.fr_running` -le 0 ]; then
33 ${ipfilter_program:-/sbin/ipf} -E
35 ${ipfilter_program:-/sbin/ipf} -Fa
36 if [ -r "${ipfilter_rules}" ]; then
37 ${ipfilter_program:-/sbin/ipf} \
38 -f "${ipfilter_rules}" ${ipfilter_flags}
40 ${ipfilter_program:-/sbin/ipf} -6 -Fa
41 if [ -r "${ipv6_ipfilter_rules}" ]; then
42 ${ipfilter_program:-/sbin/ipf} -6 \
43 -f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
49 # XXX - The ipf -D command is not effective for 'lkm's
50 if [ `sysctl -n net.inet.ipf.fr_running` -eq 1 ]; then
51 echo "Saving firewall state tables"
52 ${ipfs_program:-/sbin/ipfs} -W ${ipfs_flags}
53 echo "Disabling ipfilter."
54 ${ipfilter_program:-/sbin/ipf} -D
60 echo "Reloading ipfilter rules."
62 ${ipfilter_program:-/sbin/ipf} -I -Fa
63 if [ -r "${ipfilter_rules}" ]; then
64 ${ipfilter_program:-/sbin/ipf} -I \
65 -f "${ipfilter_rules}" ${ipfilter_flags}
67 err 1 'Load of rules into alternate set failed; aborting reload'
70 ${ipfilter_program:-/sbin/ipf} -I -6 -Fa
71 if [ -r "${ipv6_ipfilter_rules}" ]; then
72 ${ipfilter_program:-/sbin/ipf} -I -6 \
73 -f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
75 err 1 'Load of IPv6 rules into alternate set failed; aborting reload'
78 ${ipfilter_program:-/sbin/ipf} -s
84 ${ipfilter_program:-/sbin/ipf} -y ${ipfilter_flags}
89 ${ipfilter_program:-/sbin/ipf} -V