usage: hwctl [-n] [-e] variable ... hwctl [-n] [-e] [-q] [-r|-R|-s] variable=value ... hwctl [-n] [-e] [-q] [-r|-R|-s] [-f ] hwctl [-n] [-e] -a hwctl [-n] [-e] -A hwctl {--help|-h|-V|--version} Revision 1.12 DESCRIPTION hwctl is used to set or modify honeywall parameters at runtime. It serves a similar function to that of sysctl(8) for procfs, but does not work exactly the same. You can use this program to individually show/set variables, or operate on sets of variables by including more than one on the command line. The existance of an equal sign in an argument (e.g., "HwFOO=foo") will set the variable, while a variable name by itself will show the variable. PARAMETERS variable The name of a key to read from. An example is HwHOSTNAME. The '/' separator is also accepted in place of a '.'. variable=value To set a key, use the form variable=value, where variable is the key and value is the value to set it to. If the value contains quotes or characters which are parsed by the shell, you may need to enclose the value in double quotes. -r Use this option to restart services that depend on the variables just changed. (Not compatible with -f). -R Force a wholesale stop/start of all services before/after changing variables (e.g., with -f.) This option acts like -r if not used with -f. -s Use "start", rather than "restart", as the argument for rc files being called. This option is useful in conjunction with -f when loading initial values for variables. (If you are loading a new honeywall.conf to a previously configured system, you probably want to use -R instead.) -n Use this option to disable printing of the key name when printing values. -e Use this option to ignore errors about unknown keys. -N Use this option to only print the names. It may be useful with shells that have programmable completion. -q Use this option to not display the values set to stdout. -f Load in honeywall settings from the file specified or /etc/honeywall.conf if none given. (Same as running "loadvars") -p (Alias for -f for those who really like sysctl compatibility) -a Display all values currently available. --help -h Print this help message. --version -V Just print version number and exit. EXAMPLES o Show all variables currently set with "NAME = VALUE" form (use -A if you don't want the spaces): # hwctl -a o Just print on standard output the value of HwHOSTNAME: # hwctl -n HwHOSTNAME o Set all four connection rate limits and restart any services that depend on these variables: # hwctl -r HwTCPRATE=20 HwUDPRATE=10 HwICMPRATE=30 HwOTHERRATE=10 o Load a complete new set of variables from /etc/honeywall.conf and force a "stop" before changing values, and a "start" afterwards. (This is needed to properly bring down services started with the old values and bring the services back up with the new ones.) # hwctl -R -f /etc/honeywall.conf FILES /hw/conf/* /etc/honeywall.conf