#
# One firewall, one card.  Copy this per card that should be filtered:
# the name, the srv name and the -e argument change together.
#
# fw daemonizes, as Plan 9 file servers do, so what init watches is the
# /srv name and not the pid.  The name is there exactly while the
# firewall is filtering: it appears when the server posts it and goes
# when the last of fw exits, whether that is the wire failing, the
# control filesystem going away, or a note.
#
# It has to start after the card has an address, because that is where
# fw reads the address, mask and gateway from - and before anything
# dials, because a connection made before fw is up was never filtered.
#
svc=fw.ether0
	exec=/bin/fw
	args=-s
	args=fw.ether0
	args=-m
	args=/mnt/fw/ether0
	args=-e
	args=/net/ether0
	args=/lib/fw/host.ndb
	needs=ipconfig
	ready=srv:fw.ether0
	restart=always
	enable=no