#!/bin/sh
# DF-0668 run: ipfw3 must be loaded (default-accept so ssh survives).
# Requires ROOT (raw socket privilege). Default id=0x4000 -> OOB panic.
set -e
sysctl -w net.filters_default_to_accept=1 >/dev/null 2>&1 || true
kldload ipfw3       2>/dev/null || true
kldload ipfw3_basic 2>/dev/null || true
./ipfw3_table_oob "$@"