Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Jun 2005 23:40:43 +0300
From:      Giorgos Keramidas <keramida@ceid.upatras.gr>
To:        fbsd_user <fbsd_user@a1poweruser.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: (PF) Packet filter firewall rule numbers
Message-ID:  <20050624204043.GA1055@gothmog.gr>
In-Reply-To: <MIEPLLIBMLEEABPDBIEGMEIOHHAA.fbsd_user@a1poweruser.com>
References:  <MIEPLLIBMLEEABPDBIEGMEIOHHAA.fbsd_user@a1poweruser.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2005-06-24 13:08, fbsd_user <fbsd_user@a1poweruser.com> wrote:
> I see rule numbers in the pf.log file but can not find any way to list the
> incore rules with their internal rule numbers.
> Is there a way to list the incore PF rules with rule numbers?

	# pfctl -vv -sr

The double -v option *is* significant.

> Can a pf rule be inserted into the incore rules after or before a
> selected rule?

Not sure.  You can reload the rules *AND* keep the state information though,
so this may not be necessary.

- Giorgos




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050624204043.GA1055>