How to reload ipf rules without disconnecting current connections?

This is a discussion on How to reload ipf rules without disconnecting current connections? within the IPFilter forums, part of the System Security and Security Related category; Hello, Sorry for this very obtuse question. I change my ipf.conf a fair bit, and when reloading it with ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-10-2005
Amadeus Stevenson
 
Posts: n/a
Default How to reload ipf rules without disconnecting current connections?

Hello,

Sorry for this very obtuse question.

I change my ipf.conf a fair bit, and when reloading it with a short script:

#!/bin/sh

cp /etc/ipf.$1 /etc/ipf.conf
/etc/rc.d/ipfilter restart
/etc/rc.d/ipnat restart

Where I have different configurations (ipf.oh, ipf.stable etc) and I
modify the original and run "script stable" to put the ipf.stable
configuration in action. I also change ipnat. I found that if I don't
restart ipnat after ipf no nat will happen. (netbsd-2.0)

Thing is, this disconnects current connections (like ssh sessions etc).

What is the best way to update configuration without this side effect?

Sorry for the dumbness. I read about different rulesets but am not
sure how this applies here.

Thanks

Amadeus

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 09:42 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0