blob: 93de412dbcd1f950e5bdcacd6d6faa8a0288ee1b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
#
# One firewall, one card. Copy this per card that should be filtered:
# the name, the srv name and the -e argument change together.
#
# fw daemonizes, as Plan 9 file servers do, so what init watches is the
# /srv name and not the pid. The name is there exactly while the
# firewall is filtering: it appears when the server posts it and goes
# when the last of fw exits, whether that is the wire failing, the
# control filesystem going away, or a note.
#
# It has to start after the card has an address, because that is where
# fw reads the address, mask and gateway from - and before anything
# dials, because a connection made before fw is up was never filtered.
#
svc=fw.ether0
exec=/bin/fw
args=-s
args=fw.ether0
args=-m
args=/mnt/fw/ether0
args=-e
args=/net/ether0
args=/lib/fw/host.ndb
needs=ipconfig
ready=srv:fw.ether0
restart=always
enable=no
|
