diff options
Diffstat (limited to 'fw/lib')
| -rw-r--r-- | fw/lib/svc/fw.ether0 | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/fw/lib/svc/fw.ether0 b/fw/lib/svc/fw.ether0 new file mode 100644 index 0000000..93de412 --- /dev/null +++ b/fw/lib/svc/fw.ether0 @@ -0,0 +1,27 @@ +# +# One firewall, one card. Copy this per card that should be filtered: +# the name, the srv name and the -e argument change together. +# +# fw daemonizes, as Plan 9 file servers do, so what init watches is the +# /srv name and not the pid. The name is there exactly while the +# firewall is filtering: it appears when the server posts it and goes +# when the last of fw exits, whether that is the wire failing, the +# control filesystem going away, or a note. +# +# It has to start after the card has an address, because that is where +# fw reads the address, mask and gateway from - and before anything +# dials, because a connection made before fw is up was never filtered. +# +svc=fw.ether0 + exec=/bin/fw + args=-s + args=fw.ether0 + args=-m + args=/mnt/fw/ether0 + args=-e + args=/net/ether0 + args=/lib/fw/host.ndb + needs=ipconfig + ready=srv:fw.ether0 + restart=always + enable=no |