Subject: Re: admin script for ipfilter
To: Darren Reed <darrenr@NetBSD.org>
From: Geert Hendrickx <ghen@NetBSD.org>
List: tech-userlevel
Date: 12/27/2006 11:16:50
On Wed, Dec 27, 2006 at 12:04:47AM +0000, Darren Reed wrote:
> So...the attached script, "ipfadm", I'm curious for feedback on.
> 
> The idea is to do "ipfadm enable ipfilter" or "ipfadm disable ipfilter"
> and it updates the relevant rc.d config file for you.
> 
> Ok, not catchy...
> 
> What I hope is of more interest is doing "ipfadm ipfilter status",
> where it will tell you if it is enabled, disabled, enabled but no rules,
> or disabled but rules loaded.
> 
> Feedback welcome.

Why not generalise this to "rc.dadmin enable/disable/status XXX" to toggle
arbitrary startup scripts?  You could still add ipfilter-specific hooks (as
well as for other rc.d scripts) for the "status" command.

	Geert