| rc.firewall (229783) | rc.firewall (238416) |
|---|---|
| 1#!/bin/sh - 2# Copyright (c) 1996 Poul-Henning Kamp 3# All rights reserved. 4# 5# Redistribution and use in source and binary forms, with or without 6# modification, are permitted provided that the following conditions 7# are met: 8# 1. Redistributions of source code must retain the above copyright --- 9 unchanged lines hidden (view full) --- 18# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24# SUCH DAMAGE. 25# | 1#!/bin/sh - 2# Copyright (c) 1996 Poul-Henning Kamp 3# All rights reserved. 4# 5# Redistribution and use in source and binary forms, with or without 6# modification, are permitted provided that the following conditions 7# are met: 8# 1. Redistributions of source code must retain the above copyright --- 9 unchanged lines hidden (view full) --- 18# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24# SUCH DAMAGE. 25# |
| 26# $FreeBSD: head/etc/rc.firewall 229783 2012-01-07 16:10:32Z uqs $ | 26# $FreeBSD: head/etc/rc.firewall 238416 2012-07-13 06:46:09Z kevlo $ |
| 27# 28 29# 30# Setup system for ipfw(4) firewall service. 31# 32 33# Suck in the configuration variables. 34if [ -z "${source_rc_confs_defined}" ]; then --- 38 unchanged lines hidden (view full) --- 73# William R. Cheswick, Steven M. Bellowin, Aviel D. Rubin 74# 75# Addison-Wesley / Prentice Hall 76# ISBN 0-201-63466-X 77# http://www.pearsonhighered.com/ 78# http://www.pearsonhighered.com/educator/academic/product/0,3110,020163466X,00.html 79# 80 | 27# 28 29# 30# Setup system for ipfw(4) firewall service. 31# 32 33# Suck in the configuration variables. 34if [ -z "${source_rc_confs_defined}" ]; then --- 38 unchanged lines hidden (view full) --- 73# William R. Cheswick, Steven M. Bellowin, Aviel D. Rubin 74# 75# Addison-Wesley / Prentice Hall 76# ISBN 0-201-63466-X 77# http://www.pearsonhighered.com/ 78# http://www.pearsonhighered.com/educator/academic/product/0,3110,020163466X,00.html 79# 80 |
| 81setup_loopback () { | 81setup_loopback() { |
| 82 ############ 83 # Only in rare cases do you want to change these rules 84 # 85 ${fwcmd} add 100 pass all from any to any via lo0 86 ${fwcmd} add 200 deny all from any to 127.0.0.0/8 87 ${fwcmd} add 300 deny ip from 127.0.0.0/8 to any 88 if [ $ipv6_available -eq 0 ]; then 89 ${fwcmd} add 400 deny all from any to ::1 90 ${fwcmd} add 500 deny all from ::1 to any 91 fi 92} 93 | 82 ############ 83 # Only in rare cases do you want to change these rules 84 # 85 ${fwcmd} add 100 pass all from any to any via lo0 86 ${fwcmd} add 200 deny all from any to 127.0.0.0/8 87 ${fwcmd} add 300 deny ip from 127.0.0.0/8 to any 88 if [ $ipv6_available -eq 0 ]; then 89 ${fwcmd} add 400 deny all from any to ::1 90 ${fwcmd} add 500 deny all from ::1 to any 91 fi 92} 93 |
| 94setup_ipv6_mandatory () { | 94setup_ipv6_mandatory() { |
| 95 [ $ipv6_available -eq 0 ] || return 0 96 97 ############ 98 # Only in rare cases do you want to change these rules 99 # 100 # ND 101 # 102 # DAD --- 437 unchanged lines hidden --- | 95 [ $ipv6_available -eq 0 ] || return 0 96 97 ############ 98 # Only in rare cases do you want to change these rules 99 # 100 # ND 101 # 102 # DAD --- 437 unchanged lines hidden --- |