ipfilter revision 1.12 
1#!/bin/sh
2#
3# $NetBSD: ipfilter,v 1.12 2004/09/09 00:33:03 lukem Exp $
4#
5
6# PROVIDE: ipfilter
7# REQUIRE: root beforenetlkm mountcritlocal tty
8
9$_rc_subr_loaded . /etc/rc.subr
10
11name="ipfilter"
12rcvar=$name
13start_precmd="ipfilter_prestart"
14start_cmd="ipfilter_start"
15stop_precmd="test -f /etc/ipf.conf -o -f /etc/ipf6.conf"
16stop_cmd="ipfilter_stop"
17reload_precmd="$stop_precmd"
18reload_cmd="ipfilter_reload"
19resync_precmd="$stop_precmd"
20resync_cmd="ipfilter_resync"
21status_precmd="$stop_precmd"
22status_cmd="ipfilter_status"
23extra_commands="reload resync status"
24
25ipfilter_prestart()
26{
27	if [ ! -f /etc/ipf.conf ] && [ ! -f /etc/ipf6.conf ]; then
28		warn "/etc/ipf*.conf not readable; ipfilter start aborted."
29			#
30			# If booting directly to multiuser, send SIGTERM to
31			# the parent (/etc/rc) to abort the boot
32			#
33		if [ "$autoboot" = yes ]; then
34			echo "ERROR: ABORTING BOOT (sending SIGTERM to parent)!"
35			kill -TERM $$
36			exit 1
37		fi
38		return 1
39	fi
40	return 0
41}
42
43ipfilter_start()
44{
45	echo "Enabling ipfilter."
46	/sbin/ipf -E -Fa
47	if [ -f /etc/ipf.conf ]; then
48		/sbin/ipf -Fa -f /etc/ipf.conf
49	fi
50	if [ -f /etc/ipf6.conf ]; then
51		/sbin/ipf -6 -Fa -f /etc/ipf6.conf
52	fi
53}
54
55ipfilter_stop()
56{
57	echo "Disabling ipfilter."
58	/sbin/ipf -D
59}
60
61ipfilter_reload()
62{
63	echo "Reloading ipfilter rules."
64
65	if [ -f /etc/ipf.conf ] && ! /sbin/ipf -I -Fa -f /etc/ipf.conf; then
66		err 1 "reload of ipf.conf failed; not swapping to new ruleset."
67	fi
68	if [ -f /etc/ipf6.conf ] && ! /sbin/ipf -6 -I -Fa -f /etc/ipf6.conf; then
69		err 1 "reload of ipf6.conf failed; not swapping to new ruleset."
70	fi
71	/sbin/ipf -s
72}
73
74ipfilter_resync()
75{
76	/sbin/ipf -y
77}
78
79ipfilter_status()
80{
81	/sbin/ipf -V
82}
83
84load_rc_config $name
85run_rc_command "$1"
86