IPFILTER rules with shell symbloic substitution

Roman Neuhauser neuhauser at bellavista.cz
Thu Nov 27 06:26:02 PST 2003


# dnelson at allantgroup.com / 2003-11-26 12:13:53 -0600:
> In the last episode (Nov 26), fbsd_user said:
> > Looking for way to code IPFILTER rules with shell symbolic
> > substitution. I know how to do it in the rules, but how to get ipf
> > pgm to exec in shell? Any body have example of how to setup this?
> 
> /etc/rc.firewall has lots of examples using ipfw; the concepts should
> work just as well with ipf.

    that won't work with ipf, but: you can have the rules passed through
    /bin/sh (which would do the substitutions), and piped into ipf.

-- 
If you cc me or remove the list(s) completely I'll most likely ignore
your message.    see http://www.eyrie.org./~eagle/faqs/questions.html


More information about the freebsd-questions mailing list