pf revision 165683 
1#!/bin/sh
2#
3# $FreeBSD: head/etc/rc.d/pf 165683 2006-12-31 10:37:18Z yar $
4#
5
6# PROVIDE: pf
7# REQUIRE: root mountcritlocal netif pflog pfsync
8# BEFORE:  routing
9# KEYWORD: nojail
10
11. /etc/rc.subr
12
13name="pf"
14rcvar=`set_rcvar`
15load_rc_config $name
16start_cmd="pf_start"
17stop_cmd="pf_stop"
18check_cmd="pf_check"
19reload_cmd="pf_reload"
20resync_cmd="pf_resync"
21status_cmd="pf_status"
22extra_commands="check reload resync status"
23required_files="$pf_rules"
24required_modules="pf"
25
26pf_start()
27{
28	echo "Enabling pf."
29	$pf_program -F all > /dev/null 2>&1
30	$pf_program -f "$pf_rules" $pf_flags
31	if ! $pf_program -s info | grep -q "Enabled" ; then
32		$pf_program -e
33	fi
34}
35
36pf_stop()
37{
38	if $pf_program -s info | grep -q "Enabled" ; then
39		echo "Disabling pf."
40		$pf_program -d
41	fi
42}
43
44pf_check()
45{
46	echo "Checking pf rules."
47	$pf_program -n -f "$pf_rules"
48}
49
50pf_reload()
51{
52	echo "Reloading pf rules."
53	$pf_program -n -f "$pf_rules" || return 1
54	# Flush everything but existing state entries that way when
55	# rules are read in, it doesn't break established connections.
56	$pf_program -Fnat -Fqueue -Frules -FSources -Finfo -FTables -Fosfp > /dev/null 2>&1
57	$pf_program -f "$pf_rules" $pf_flags
58}
59
60pf_resync()
61{
62	$pf_program -f "$pf_rules" $pf_flags
63}
64
65pf_status()
66{
67	$pf_program -s info
68}
69
70run_rc_command "$1"
71