Subject: Re: resetting the IP packet filter rules without rebooting...
To: Herb Peyerl <>
From: Andrew Brown <>
List: netbsd-users
Date: 11/25/2002 12:58:44
> > >ipf -D ; ipf -E -f /etc/ipf.conf ; ipnat -f /etc/ipnat.conf ; sleep 30 ; ipf -D
> > >
> > >I hit return and after a couple seconds, I hit ^C.  If the ^C makes it,
> > >then it doesn't "ipf -D". If not, then I know I only have to wait about
> > >30 seconds before I'll have access to the machine again.
> > 
> > i assert that it's more useful to type something (anything, doesn't
> > matter what, since sleep doesn't care) and *if* you see output (ie,
> > full-duplex echo-back is working), *then* you hit control-c.  if you
> > don't get echo-back, then your new filters are interfering with it
>yeah, actually, I do usually hit return a few times before ^C but YKWIM.

i just figured i'd make that point obvious.  i did it once with a
sleep of 5, and the control-c (apparently) made it, but nothing else
seemed to work after that.

what a pain.

|-----< "CODE WARRIOR" >-----|             * "ah!  i see you have the internet (Andrew Brown)                that goes *ping*!"       * "information is power -- share the wealth."