From owner-freebsd-questions@FreeBSD.ORG Fri Jun 24 20:41:39 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 989C616A41C for ; Fri, 24 Jun 2005 20:41:39 +0000 (GMT) (envelope-from keramida@ceid.upatras.gr) Received: from nic.ach.sch.gr (nic.sch.gr [194.63.238.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id BAE7F43D48 for ; Fri, 24 Jun 2005 20:41:37 +0000 (GMT) (envelope-from keramida@ceid.upatras.gr) Received: (qmail 2976 invoked by uid 207); 24 Jun 2005 20:41:37 -0000 Received: from keramida@ceid.upatras.gr by nic by uid 201 with qmail-scanner-1.21 (sophie: 3.04/2.19/3.81. Clear:RC:1(81.186.70.145):. Processed in 3.338798 secs); 24 Jun 2005 20:41:37 -0000 Received: from dialup145.ach.sch.gr (HELO gothmog.gr) ([81.186.70.145]) (envelope-sender ) by nic.sch.gr (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for ; 24 Jun 2005 20:41:33 -0000 Received: from gothmog.gr (gothmog [127.0.0.1]) by gothmog.gr (8.13.4/8.13.4) with ESMTP id j5OKf0Wb001165; Fri, 24 Jun 2005 23:41:00 +0300 (EEST) (envelope-from keramida@ceid.upatras.gr) Received: (from giorgos@localhost) by gothmog.gr (8.13.4/8.13.4/Submit) id j5OKeso1001156; Fri, 24 Jun 2005 23:40:54 +0300 (EEST) (envelope-from keramida@ceid.upatras.gr) Date: Fri, 24 Jun 2005 23:40:43 +0300 From: Giorgos Keramidas To: fbsd_user Message-ID: <20050624204043.GA1055@gothmog.gr> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Cc: freebsd-questions@freebsd.org Subject: Re: (PF) Packet filter firewall rule numbers X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jun 2005 20:41:39 -0000 On 2005-06-24 13:08, fbsd_user wrote: > I see rule numbers in the pf.log file but can not find any way to list the > incore rules with their internal rule numbers. > Is there a way to list the incore PF rules with rule numbers? # pfctl -vv -sr The double -v option *is* significant. > Can a pf rule be inserted into the incore rules after or before a > selected rule? Not sure. You can reload the rules *AND* keep the state information though, so this may not be necessary. - Giorgos