#!/bin/sh
# DF-2592 run — must run as root (raw IP socket = SYSCAP_NONET_RAW).
# Requires: ipfw3.ko loaded. (run_root wrapper loads it with safe default.)
# Args: [readlen]   defaults: 4096
echo "[*] loading ipfw3 (filters_default_to_accept=1 so ssh survives)..."
sysctl net.filters_default_to_accept=1 2>/dev/null
kldload ipfw3 2>/dev/null
kldload ipfw3_basic 2>/dev/null
BIN="${1:-./poc}"
RLEN="${2:-4096}"
echo "+ $BIN $RLEN"
exec "$BIN" "$RLEN"