Discussion:
IPFW and separate data files.
(too old to reply)
Jerry
2010-04-11 15:57:40 UTC
Permalink
I am using IPFW on a FreeBSD-7.3 machine. Presently, I am loading
several tables for IPFW. So far, I have just keep the data for the
tables in the actual "ipfw-rules" referenced in the 'rc.conf' file
itself. What I would like to do is keep the data for these tables in
separate files and just have them imported when the firewall is loaded.
I have constructed a simple script that is called from the 'ipfw-rules'
file.

My question is if there is a better way of accomplishing this? Is there
a downside to doing this way? The data for these tables tends to be
dynamic and I would rather work with the separate files than edit the
master one and risk messing it up.
--
Jerry
***@seibercom.net

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.
__________________________________________________________________

Birth, n.: The first and direst of all disasters.

Ambrose Bierce, "The Devil's Dictionary"
Steve Bertrand
2010-04-12 14:04:48 UTC
Permalink
Post by Jerry
I am using IPFW on a FreeBSD-7.3 machine. Presently, I am loading
several tables for IPFW. So far, I have just keep the data for the
tables in the actual "ipfw-rules" referenced in the 'rc.conf' file
itself. What I would like to do is keep the data for these tables in
separate files and just have them imported when the firewall is loaded.
I have constructed a simple script that is called from the 'ipfw-rules'
file.
My question is if there is a better way of accomplishing this? Is there
a downside to doing this way? The data for these tables tends to be
dynamic and I would rather work with the separate files than edit the
master one and risk messing it up.
I have a setup that is very similar to this. I 'include' the other files
from the one referenced in /etc/rc.conf by adding lines like this:

. /etc/ipfw.include

Steve

Loading...