etc/rc.d/ip6fw

   1 #!/bin/sh
   2 #
   3 # $FreeBSD$
   4 #
   5
   6 # PROVIDE: ip6fw
   7 # REQUIRE: routing
   8 # KEYWORD: nojail
   9
  10 . /etc/rc.subr
  11
  12 name="ip6fw"
  13 rcvar=`set_rcvar ipv6_firewall`
  14 start_cmd="ip6fw_start"
  15 stop_cmd="${SYSCTL_W} net.inet6.ip6.fw.enable=0"
  16 required_modules="ipfw"
  17
  18 ip6fw_start()
  19 {
  20         # Specify default rules file if none provided
  21         if [ -z "${ipv6_firewall_script}" ]; then
  22                 ipv6_firewall_script=/etc/rc.firewall6
  23         fi
  24
  25         # Load rules
  26         #
  27         if [ -r "${ipv6_firewall_script}" ]; then
  28                 /bin/sh "${ipv6_firewall_script}"
  29                 echo 'IPv6 Firewall rules loaded.'
  30         elif [ "`ipfw show 65535`" = "65535 deny ip from any to any" ]; then
  31                 warn 'IPv6 firewall rules have not been loaded. Default' \
  32                     ' to DENY all access.'
  33         fi
  34
  35         # Enable firewall logging
  36         #
  37         if checkyesno ipv6_firewall_logging; then
  38                 echo 'IPv6 Firewall logging=YES'
  39                 sysctl net.inet.ip.fw.verbose=1 >/dev/null
  40         fi
  41
  42         # Enable the firewall
  43         #
  44         ${SYSCTL_W} net.inet6.ip6.fw.enable=1
  45 }
  46
  47 load_rc_config $name
  48 run_rc_command "$1"