8 # BEFORE: ipmon ipnat netif netwait securelevel
14 desc="IP packet filter"
15 rcvar="ipfilter_enable"
17 stop_precmd="test -f ${ipfilter_rules} -o -f ${ipv6_ipfilter_rules}"
19 start_precmd="$stop_precmd"
20 start_cmd="ipfilter_start"
21 stop_cmd="ipfilter_stop"
22 reload_precmd="$stop_precmd"
23 reload_cmd="ipfilter_reload"
24 resync_precmd="$stop_precmd"
25 resync_cmd="ipfilter_resync"
26 status_precmd="$stop_precmd"
27 status_cmd="ipfilter_status"
28 extra_commands="reload resync"
29 required_modules="ipl:ipfilter"
33 echo "Enabling ipfilter."
34 if ! ${ipfilter_program:-/sbin/ipf} -V | grep -q 'Running: yes'; then
35 ${ipfilter_program:-/sbin/ipf} -E
37 ${ipfilter_program:-/sbin/ipf} -Fa
38 if [ -r "${ipfilter_rules}" ]; then
39 ${ipfilter_program:-/sbin/ipf} \
40 -f "${ipfilter_rules}" ${ipfilter_flags}
42 if [ -r "${ipv6_ipfilter_rules}" ]; then
43 ${ipfilter_program:-/sbin/ipf} -6 \
44 -f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
50 if ${ipfilter_program:-/sbin/ipf} -V | grep -q 'Running: yes'; then
51 echo "Saving firewall state tables"
52 ${ipfs_program:-/sbin/ipfs} -W ${ipfs_flags}
53 echo "Disabling ipfilter."
54 ${ipfilter_program:-/sbin/ipf} -D
60 echo "Reloading ipfilter rules."
62 ${ipfilter_program:-/sbin/ipf} -I -Fa
63 if [ -r "${ipfilter_rules}" ]; then
64 ${ipfilter_program:-/sbin/ipf} -I \
65 -f "${ipfilter_rules}" ${ipfilter_flags}
67 err 1 'Load of rules into alternate set failed; aborting reload'
70 if [ -r "${ipv6_ipfilter_rules}" ]; then
71 ${ipfilter_program:-/sbin/ipf} -I -6 \
72 -f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
74 err 1 'Load of IPv6 rules into alternate set failed; aborting reload'
77 ${ipfilter_program:-/sbin/ipf} -s
83 ${ipfilter_program:-/sbin/ipf} -y ${ipfilter_flags}
88 ${ipfilter_program:-/sbin/ipf} -V