diff options
author | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2005-06-14 22:49:07 +0000 |
---|---|---|
committer | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2005-06-14 22:49:07 +0000 |
commit | 59a2d2c9eab631fc331e1857eb183d2203358dcc (patch) | |
tree | 3deb8987467576111ba6d5e58f8a1022d4216731 | |
parent | 4729e5285b543b98164d968fbc2cb3ca2c43fc46 (diff) |
split the dummy ruleset pfctl -f - -e into separate -f - and -e.
relevant when the dummy ruleset can't be loaded, we still want to enable
pf, otherwise the real ruleset (even if that does load correctly) won't
be active. might happen on a non-GENERIC kernel or after an update (before
/etc is manually updated). reported by Jim Rees. ok frantzen@
-rw-r--r-- | etc/rc | 5 |
1 files changed, 3 insertions, 2 deletions
@@ -1,4 +1,4 @@ -# $OpenBSD: rc,v 1.268 2005/06/02 20:09:38 tholo Exp $ +# $OpenBSD: rc,v 1.269 2005/06/14 22:49:06 dhartmei Exp $ # System startup script run by init on autoboot # or after single-user. @@ -234,7 +234,8 @@ if [ X"${pf}" != X"NO" ]; then RULES="$RULES\npass out proto udp from any to any port { 111, 2049 }" ;; esac - echo $RULES | pfctl -f - -e + echo $RULES | pfctl -f - + pfctl -e fi sysctl_conf |