IPF во FreeBSD

Команды

ipf -E : Enable ipfilter when running for the first time (Need for ipf on Tru64)

ipf -f /etc/ipf/ipf.conf : Load rules in /etc/ipf/ipf.conf file into the active firewall.

ipf -Fa -f /etc/ipf/ipf.conf : Flush all rules, then load rules in /etc/ipf/ipf.conf into active firwall.

ipf -Fi : Flush all input rules.

ipf -I -f /etc/ipf/ipf.conf : Load rules in /etc/ipf/ipf.conf file into inactive firewall.



ipf -V : Show version info and active list.

ipf -s : Swap active and inactive firewalls.

ipfstat : Show summary

ipfstat -i : Show input list

ipfstat -o : Show output list

ipfstat -hio : Show hits against all rules

ipfstat -t -T 5 : Monitor the state table and refresh every 5 seconds. Output is similiar to 'top' monitoring the process table.

ipmon -s S : Watch state table.

ipmon -sn : Write logged entries to syslog, and convert back to hostnames and servicenames.

ipmon -s [file] : Write logged entries to some file.

ipmon -Ds : Run ipmon as a daemon, and log to default location (/var/adm/messages for Solaris or /var/log/syslog for Tru64)

ipnat -CF -f /etc/ipf/ipnat.conf : Load rules from /etc/ipf/ipnat.conf file into the active firewall.