Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 24 Jan 2006 17:59:37 +0100
From:      peter@bgnett.no (Peter N. M. Hansteen)
To:        freebsd-questions@freebsd.org
Cc:        jdow <jdow@earthlink.net>
Subject:   Re: How to tell if IPF is running?
Message-ID:  <86ek2xa7eu.fsf@amidala.datadok.no>
In-Reply-To: <006001c61d47$973bccc0$1225a8c0@kittycat> (jdow@earthlink.net's message of "Thu, 19 Jan 2006 14:27:53 -0800")
References:  <006001c61d47$973bccc0$1225a8c0@kittycat>

next in thread | previous in thread | raw e-mail | index | archive | help
"jdow" <jdow@earthlink.net> writes:

> Which tool would be able to do this sort of thing best and how might it
> have been done.

PF has most of the bits you need built in, see eg
http://www.bgnett.no/~peter/pf/en/bruteforce.html (part of a PF
tutorial).  

For weeding out old table entries, you might want to look at
the expiretable utility (http://expiretable.fnord.se/).

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
"First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86ek2xa7eu.fsf>