freebsd 自带防火墙二（ipfilter）

相关文件：
/etc/rc.d/ipfilter
/etc/rc.d/ipfs
/etc/rc.d/ipmon
/dev/ipauth
/dev/ipl
/dev/ipstate
/sbin/ipf
/sbin/ipftest
/sbin/ippool
/sbin/ipnat  
/sbin/ipfstat  
/sbin/ipmon  
/sbin/ipfs  
/etc/ipf.rules
/var/log/ipfilter.log
/etc/ipf.rules.script
rc.conf:
ipfilter_enable="NO"        # Set to YES to enable ipfilter functionality
ipfilter_program="/sbin/ipf"    # where the ipfilter program lives
ipfilter_rules="/etc/ipf.rules"    # rules definition file for ipfilter, see
                # /usr/src/contrib/ipfilter/rules for examples
ipfilter_flags=""        # additional flags for ipfilter
ipnat_enable="NO"        # Set to YES to enable ipnat functionality
ipnat_program="/sbin/ipnat"    # where the ipnat program lives
ipnat_rules="/etc/ipnat.rules"    # rules definition file for ipnat
ipnat_flags=""            # additional flags for ipnat
ipmon_enable="NO"        # Set to YES for ipmon; needs ipfilter or ipnat
ipmon_program="/sbin/ipmon"    # where the ipfilter monitor program lives
ipmon_flags="-Ds"        # typically "-Ds" or "-D /var/log/ipflog"
ipfs_enable="NO"        # Set to YES to enable saving and restoring
                # of state tables at shutdown and boot
ipfs_program="/sbin/ipfs"    # where the ipfs program lives
ipfs_flags=""            # additional flags for ipfs
gateway_enable="YES"
内核：
options IPFILTER
options IPFILTER_LOG
options IPFILTER_DEFAULT_BLOCK


本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/3514/showart_66195.html

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有