3 # $NetBSD: ipfilter,v 1.10 2001/02/28 17:03:50 lukem Exp $
17 stop_precmd="test -f ${ipfilter_rules} -o -f ${ipv6_ipfilter_rules}"
19 start_precmd="$stop_precmd"
20 start_cmd="ipfilter_start"
21 stop_cmd="ipfilter_stop"
22 reload_precmd="$stop_precmd"
23 reload_cmd="ipfilter_reload"
24 resync_precmd="$stop_precmd"
25 resync_cmd="ipfilter_resync"
26 status_precmd="$stop_precmd"
27 status_cmd="ipfilter_status"
28 extra_commands="reload resync status"
29 required_modules="ipl:ipfilter"
33 echo "Enabling ipfilter."
34 if [ `sysctl -n net.inet.ipf.fr_running` -le 0 ]; then
35 ${ipfilter_program:-/sbin/ipf} -E
37 ${ipfilter_program:-/sbin/ipf} -Fa
38 if [ -r "${ipfilter_rules}" ]; then
39 ${ipfilter_program:-/sbin/ipf} \
40 -f "${ipfilter_rules}" ${ipfilter_flags}
42 ${ipfilter_program:-/sbin/ipf} -6 -Fa
43 if [ -r "${ipv6_ipfilter_rules}" ]; then
44 ${ipfilter_program:-/sbin/ipf} -6 \
45 -f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
51 # XXX - The ipf -D command is not effective for 'lkm's
52 if [ `sysctl -n net.inet.ipf.fr_running` -eq 1 ]; then
53 echo "Saving firewall state tables"
54 ${ipfs_program:-/sbin/ipfs} -W ${ipfs_flags}
55 echo "Disabling ipfilter."
56 ${ipfilter_program:-/sbin/ipf} -D
62 echo "Reloading ipfilter rules."
64 ${ipfilter_program:-/sbin/ipf} -I -Fa
65 if [ -r "${ipfilter_rules}" ]; then
66 ${ipfilter_program:-/sbin/ipf} -I \
67 -f "${ipfilter_rules}" ${ipfilter_flags}
69 err 1 'Load of rules into alternate set failed; aborting reload'
72 ${ipfilter_program:-/sbin/ipf} -I -6 -Fa
73 if [ -r "${ipv6_ipfilter_rules}" ]; then
74 ${ipfilter_program:-/sbin/ipf} -I -6 \
75 -f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
77 err 1 'Load of IPv6 rules into alternate set failed; aborting reload'
80 ${ipfilter_program:-/sbin/ipf} -s
86 ${ipfilter_program:-/sbin/ipf} -y ${ipfilter_flags}
91 ${ipfilter_program:-/sbin/ipf} -V