Subject: Re: admin script for ipfilter
To: Geert Hendrickx <ghen@NetBSD.org>
From: Darren Reed <darrenr@NetBSD.org>
List: tech-userlevel
Date: 12/27/2006 23:01:57
On Wed, Dec 27, 2006 at 10:53:59PM +0100, Geert Hendrickx wrote:
> On Wed, Dec 27, 2006 at 09:33:46PM +0000, Darren Reed wrote:
> > $ /etc/rc.d/cron
> > Usage: /etc/rc.d/cron [fast|force|one](start stop restart rcvar status poll)
> >
> > You are aware of what the "force" option is used for, aren't you?
>
> Yes, although "one" is preferred in this case. But this wasn't the point.
> The point was to have "/etc/rc.d/ipfilter enable" (and "status", and ...)
> DTRT even is ipfilter is not (yet) enabled, i.e., you wouldn't have to use
> "oneenable" or "forceenable" or whatever to enable it when it is disabled.
I don't believe that it makes sense to have "forceenable" or "oneenable".
Or at least not with the current implementation.
Darren