内核支持
- 方式一:静态編译进内核
-
options IPFIREWALL # enables IPFW options IPFIREWALL_VERBOSE # enables logging for rules with log keyword options IPFIREWALL_VERBOSE_LIMIT=5 # limits number of logged packets per-entry options IPFIREWALL_DEFAULT_TO_ACCEPT # sets default policy to pass what is not explicitly denied options IPDIVERT # enables NAT
- 方式二:动态装载模块
-
# /boot/loader.conf ipfw_load="YES" ipfw_nat_load="YES"
配置文件
# /etc/rc.conf[.local] firewall_enable="YES" firewall_logging="YES"
# 如下两条二选一 firewall_type="/PATH/TO/RULE_FILE" #指定包含自定义配置规则的文件 firewall_script="/PATH/IPFW_SCRIPT" #指定具有执行权限的 ipfw rule 脚本
IPFW 語法
...
时间: 2024-08-14 09:19:49