8 # BEFORE: ipmon ipnat netif netwait securelevel
14 desc="IP packet filter"
15 rcvar="ipfilter_enable"
17 stop_precmd="test -f ${ipfilter_rules}"
19 start_precmd="$stop_precmd"
20 start_cmd="ipfilter_start"
21 stop_cmd="ipfilter_stop"
22 reload_precmd="$stop_precmd"
23 reload_cmd="ipfilter_reload"
24 resync_precmd="$stop_precmd"
25 resync_cmd="ipfilter_resync"
26 status_precmd="$stop_precmd"
27 status_cmd="ipfilter_status"
28 extra_commands="reload resync"
29 required_modules="ipl:ipfilter"
33 echo "Enabling ipfilter."
34 if ! ${ipfilter_program:-/sbin/ipf} -V | grep -q 'Running: yes'; then
35 ${ipfilter_program:-/sbin/ipf} -E
37 ${ipfilter_program:-/sbin/ipf} -Fa
38 if [ -r "${ipfilter_rules}" ]; then
39 ${ipfilter_program:-/sbin/ipf} \
40 -f "${ipfilter_rules}" ${ipfilter_flags}
46 if ${ipfilter_program:-/sbin/ipf} -V | grep -q 'Running: yes'; then
47 echo "Saving firewall state tables"
48 ${ipfs_program:-/sbin/ipfs} -W ${ipfs_flags}
49 echo "Disabling ipfilter."
50 ${ipfilter_program:-/sbin/ipf} -D
56 echo "Reloading ipfilter rules."
58 ${ipfilter_program:-/sbin/ipf} -I -Fa
59 if [ -r "${ipfilter_rules}" ]; then
60 ${ipfilter_program:-/sbin/ipf} -I \
61 -f "${ipfilter_rules}" ${ipfilter_flags}
63 err 1 'Load of rules into alternate set failed; aborting reload'
66 ${ipfilter_program:-/sbin/ipf} -s
72 ${ipfilter_program:-/sbin/ipf} -y ${ipfilter_flags}
77 ${ipfilter_program:-/sbin/ipf} -V