Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Oct 2007 16:25:09 +0200
From:      Max Laier <max@love2party.net>
To:        freebsd-pf@freebsd.org
Subject:   Re: PF and UID
Message-ID:  <200710161625.22666.max@love2party.net>
In-Reply-To: <233439.39754.qm@web53710.mail.re2.yahoo.com>
References:  <233439.39754.qm@web53710.mail.re2.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart1377065.livWW0zj2I
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Tuesday 16 October 2007, Lorenz Helleis wrote:
> Hello...
>
>  Can I create a rule using PF and UID ?
>
> like this:
>
>  " permit uid 1005 tcp port 22 "
>
> thanks

The syntax is very different, but yes - pf does support matching by user=20
credentials on the socket in question.  The pf.conf(5) man page explains=20
in detail.  Look for the "user"/"group" modifiers.

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart1377065.livWW0zj2I
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)

iD8DBQBHFMnSXyyEoT62BG0RAr2KAJ0Vf4Xu60fwfFGUzk07B7X5jHuLtwCcCIoF
7M2zy3STPhwnX785eLh9kTw=
=uf6B
-----END PGP SIGNATURE-----

--nextPart1377065.livWW0zj2I--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200710161625.22666.max>