summaryrefslogtreecommitdiff
path: root/etc/netstart
diff options
context:
space:
mode:
Diffstat (limited to 'etc/netstart')
-rw-r--r--etc/netstart12
1 files changed, 12 insertions, 0 deletions
diff --git a/etc/netstart b/etc/netstart
index f27081374ff..083167f053f 100644
--- a/etc/netstart
+++ b/etc/netstart
@@ -20,12 +20,15 @@ nfs_client=NO
gated=NO
kerberos_server=NO
amd=NO
+ipfilter=NO
# miscellaneous other flags
# only used if the appropriate server is marked YES above
gated_flags=
amd_dir=/amd # AMD's mount directory
amd_master=/etc/amd/master # AMD 'master' map
+ipfilter_rules=/etc/ipf.rules # Rules for IP packet filtering
+ipmon_flags=-s # To disable logging, use ipmon_flags=NO
# /etc/myname contains my symbolic name
#
@@ -35,6 +38,15 @@ if [ -f /etc/defaultdomain ]; then
domainname `cat /etc/defaultdomain`
fi
+# Configure the IP filter before configuring network interfaces
+#
+if [ X"${ipfilter}" = X"YES" -a -f "${ipfilter_rules}" ]; then
+ echo 'configuring IP filter'
+ ipf -Fa -f ${ipfilter_rules} -E
+else
+ ipfilter=NO
+fi
+
# configure all of the interfaces which we know about.
# do this by reading /etc/hostname.* files, where * is the name
# of a given interface.