Re: Setting firewall symbolic constants

2010-03-31 Thread Walter
Bob Hall wrote: I use onet=`ifconfig rl0 | grep inet | awk '{print $6}'` where rl0 is the outward facing NIC on this gateway. Thanks. But I think I like a method which allows me to get the device names also, to allow a 'hands-off' configuring of the fw. I'll keep your code for

Setting firewall symbolic constants

2010-03-30 Thread Walter
In the example firewall rule set in rc.firewall, there are the following lines: # set these to your outside interface network oif=$firewall_simple_oif onet=$firewall_simple_onet # set these to your inside interface network iif=$firewall_simple_iif inet=$firewall_simple_inet Can

Re: Setting firewall symbolic constants

2010-03-30 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/03/2010 13:52:57, Walter wrote: In the example firewall rule set in rc.firewall, there are the following lines: # set these to your outside interface network oif=$firewall_simple_oif onet=$firewall_simple_onet # set these to your

Re: Setting firewall symbolic constants

2010-03-30 Thread Bob Hall
On Tue, Mar 30, 2010 at 07:52:57AM -0500, Walter wrote: Can these be set by the system automatically? Specifically $firewall_simple_onet? I use onet=`ifconfig if | grep inet | awk '{print $6}'` where if is rl0 or em0 or whatever the outward facing interface is for your system.

Re: Setting firewall symbolic constants

2010-03-30 Thread Walter
Matthew Seaman wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Can these be set by the system automatically? Specifically $firewall_simple_onet? If you switch to using PF rather than IPFW, this is very easy. In a PF ruleset, the name of an interface is expanded to a list of all

Re: Setting firewall symbolic constants

2010-03-30 Thread Bob Hall
On Tue, Mar 30, 2010 at 04:17:22PM -0500, Walter wrote: Can these be set by the system automatically? Specifically $firewall_simple_onet? My first response never showed up. Second try. I use onet=`ifconfig rl0 | grep inet | awk '{print $6}'` where rl0 is the outward facing NIC on