How to Remove a Packet Filtering Rule Set

1. Assume a role that includes the IP Filter Management rights profile, or become superuser.

   You can assign the IP Filter Management rights profile to a role that you create. To create the role and assign the role to a user, see Configuring RBAC (Task Map) in System Administration Guide: Security Services.

2. Remove the rule set.

   # ipf -F [a|i|o]

   -a

   Removes all filtering rules from the rule set.

   -i

   Removes the filtering rules for incoming packets.

   -o

   Removes the filtering rules for outgoing packets.

Example 25–5 Removing a Packet Filtering Rule Set

The following example shows how to remove all filtering rules from the active filtering rule set.

# ipfstat -io
block out log on dmf0 all
block in log quick from 10.0.0.0/8 to any
# ipf -Fa
# ipfstat -io
empty list for ipfilter(out)
empty list for ipfilter(in)