stop ipfilter

[Lev]

Hi,


When I want to stop ipnat or ipfilter the command just hangs, and never
return.

This is what I do:

service ipfilter stop

The service is not stopped.

I can only kill the process.

Lev

[Ernie Luzar]

Post by Lev
Hi,
When I want to stop ipnat or ipfilter the command just hangs, and never
return.
service ipfilter stop
The service is not stopped.
I can only kill the process.
Lev

Why would you want to stop ipfilter?

Look at the ipf command for reloading updated rules and ipnat to reload
nat rules.

[Levente]

To stop NAT and the filtering. Anyways, this should not hang, should it?

Lev

Post by Ernie Luzar

Post by Lev
Hi,
When I want to stop ipnat or ipfilter the command just hangs, and never
return.
service ipfilter stop
The service is not stopped.
I can only kill the process.
Lev

Why would you want to stop ipfilter?
Look at the ipf command for reloading updated rules and ipnat to reload
nat rules.

[Ernie Luzar]

issue "ps ax" it will show you running tasks.
No task named ipfilter.

issue "service ipmon stop" and "service ipmon start"

[Ernie Luzar]

ipfilter has 2 parts, ipmon which runs in userland that is seen in the
output of ps ax command. It can be stopped and started with the service
command.

The ipfilter firewall runs as part of the kernel. To stop the ipfilter
kernel part, you have to remove the enable statement from rc.conf and
reboot.

Now on occasion I some times want to nullify all my custom rule
processing just for debugging some application. In that case I add these
rules before all other rules in the rule set.

pass in quick on xl0 all
pass out quick on xl0 all

This causes all traffic to bypass all the rules followings them, in
effect stopping your custom rule set from processing and allowing all
traffic to pass through the firewall in both directions un-touched.
Thats as close to stopping ipfilter as you can get with out removing the
rc.conf enable statement and rebooting.