how to modify freebsd ipfw rules in php-fpm
I've tried to modify the freebsd ipfw rules in php-cli in command line, since I am a root, it's ok.

But when I modify the rule via a web page ( backend is php-fpm), I got the following error message.

[04-Jul-2011 03:13:51] WARNING: [pool php-default] child 47441 said into stderr: "ipfw: socket: "
[04-Jul-2011 03:13:51] WARNING: [pool php-default] child 47441 said into stderr: "Operation not permitted"

Is there any way to allow php-fpm to modify the freebsd ipfw rules?

I am considering to use sudo to authorize php pool account to have the right to modify ipfw, is it a good idea? Appreciated if there any good suggestion. Thanks.
how to modify freebsd ipfw rules in php-fpm
===

I've tried to modify the freebsd ipfw rules in php-cli in command line, since I am a root, it's ok.

But when I modify the rule via a web page ( backend is php-fpm), I got the following error message.

[04-Jul-2011 03:13:51] WARNING: [pool php-default] child 47441 said into stderr: "ipfw: socket: "
[04-Jul-2011 03:13:51] WARNING: [pool php-default] child 47441 said into stderr: "Operation not permitted"

Is there any way to allow php-fpm to modify the freebsd ipfw rules?

I am considering to use sudo to authorize php pool account to have the right to modify ipfw, is it a good idea? Appreciated if there any good suggestion. Thanks.