Date: Mon, 15 Nov 2004 08:00:45 GMT From: Clive Lin <clive@tongi.org> To: freebsd-bugs@FreeBSD.org Subject: Re: misc/73959: Teach periodic(8) to understand pf(4) denied packets Message-ID: <200411150800.iAF80jQk046797@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR conf/73959; it has been noted by GNATS. From: Clive Lin <clive@tongi.org> To: Giorgos Keramidas <keramida@freebsd.org> Cc: bug-followup@freebsd.org Subject: Re: misc/73959: Teach periodic(8) to understand pf(4) denied packets Date: Mon, 15 Nov 2004 15:59:14 +0800 On Mon, Nov 15, 2004 at 07:43:01AM +0200, Giorgos Keramidas wrote: > : +# Copyright (c) 2001 The FreeBSD Project > : +# All rights reserved. > > The date is a bit off here :-) > > I only wanted to add that the periodic.conf.5 manpage must be updated > too, if there are changes to the list of supported variables / options. Argh. I missed both 2 parts. Alright, updated diff: http://people.freebsd.org/~clive/dist/periodic_security_520_pfdenied.diff http://people.freebsd.org/~clive/dist/periodic.conf.5.diff Previous version hides the rules. This one fixes that. The nawk stuff is, err, nasty, but the result should be acceptable: pf denied packets: > block drop log on rl0 proto tcp all [ Evaluations: 504986 Packets: 0 Bytes: 0 States: 0 ] > block drop log on rl0 all [ Evaluations: 18559 Packets: 427 Bytes: 140578 States: 0 ] -- Clive Tong-I Lin | http://tongi.org | PGP KeyID: A008C03E
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200411150800.iAF80jQk046797>