etc/rc.d/ip6fw

   1 #!/bin/sh
   2 #
   3 # $FreeBSD$
   4 #
   5
   6 # PROVIDE: ip6fw
   7 # REQUIRE: routing
   8 # BEFORE: network_ipv6
   9 # KEYWORD: nojail
  10
  11 . /etc/rc.subr
  12
  13 name="ip6fw"
  14 rcvar=`set_rcvar ipv6_firewall`
  15 start_cmd="ip6fw_start"
  16 stop_cmd="${SYSCTL_W} net.inet6.ip6.fw.enable=0"
  17 required_modules="ipfw"
  18
  19 ip6fw_start()
  20 {
  21         # Specify default rules file if none provided
  22         if [ -z "${ipv6_firewall_script}" ]; then
  23                 ipv6_firewall_script=/etc/rc.firewall6
  24         fi
  25
  26         # Load rules
  27         #
  28         if [ -r "${ipv6_firewall_script}" ]; then
  29                 /bin/sh "${ipv6_firewall_script}"
  30                 echo 'IPv6 Firewall rules loaded.'
  31         elif [ "`ipfw show 65535`" = "65535 deny ip from any to any" ]; then
  32                 warn 'IPv6 firewall rules have not been loaded. Default' \
  33                     ' to DENY all access.'
  34         fi
  35
  36         # Enable firewall logging
  37         #
  38         if checkyesno ipv6_firewall_logging; then
  39                 echo 'IPv6 Firewall logging=YES'
  40                 sysctl net.inet.ip.fw.verbose=1 >/dev/null
  41         fi
  42
  43         # Enable the firewall
  44         #
  45         ${SYSCTL_W} net.inet6.ip6.fw.enable=1
  46 }
  47
  48 load_rc_config $name
  49 run_rc_command "$1"