summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorume <ume@FreeBSD.org>2003-03-05 17:16:22 +0000
committerume <ume@FreeBSD.org>2003-03-05 17:16:22 +0000
commitafad0cd7d12c266168acda2e3d48a1587d3fc07b (patch)
tree48a2f04cb580f14c14c5864f88aac7258fff13d5
parent45fb378af936b946a5090a94a2c62774987d24c1 (diff)
downloadFreeBSD-src-afad0cd7d12c266168acda2e3d48a1587d3fc07b.zip
FreeBSD-src-afad0cd7d12c266168acda2e3d48a1587d3fc07b.tar.gz
Latest IPFilter requires flushing rules for IPv6 separately
from IPv4.
-rwxr-xr-xetc/rc.d/ipfilter2
-rw-r--r--etc/rc.network1
2 files changed, 3 insertions, 0 deletions
diff --git a/etc/rc.d/ipfilter b/etc/rc.d/ipfilter
index 423717e..ab4bb1c 100755
--- a/etc/rc.d/ipfilter
+++ b/etc/rc.d/ipfilter
@@ -84,6 +84,7 @@ ipfilter_start()
${ipfilter_program:-/sbin/ipf} \
-f "${ipfilter_rules}" ${ipfilter_flags}
fi
+ ${ipfilter_program:-/sbin/ipf} -6 -Fa
if [ -r "${ipv6_ipfilter_rules}" ]; then
${ipfilter_program:-/sbin/ipf} -6 \
-f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
@@ -127,6 +128,7 @@ ipfilter_reload()
${ipfilter_program:-/sbin/ipf} -I \
-f "${ipfilter_rules}" ${ipfilter_flags}
fi
+ ${ipfilter_program:-/sbin/ipf} -I -6 -Fa
if [ -r "${ipv6_ipfilter_rules}" ]; then
${ipfilter_program:-/sbin/ipf} -I -6 \
-f "${ipv6_ipfilter_rules}" ${ipfilter_flags}
diff --git a/etc/rc.network b/etc/rc.network
index d3d75d6..6ae5d5a 100644
--- a/etc/rc.network
+++ b/etc/rc.network
@@ -110,6 +110,7 @@ network_pass1() {
-f "${ipfilter_rules}" \
${ipfilter_flags}
fi
+ ${ipfilter_program:-/sbin/ipf} -6 -Fa
if [ -r "${ipv6_ipfilter_rules}" ]; then
${ipfilter_program:-/sbin/ipf} -6 \
-f "${ipv6_ipfilter_rules}" \
OpenPOWER on IntegriCloud