misc/73959: Teach periodic(8) to understand pf(4) denied packets
Clive Lin
clive at tongi.org
Mon Nov 15 00:00:45 PST 2004
The following reply was made to PR conf/73959; it has been noted by GNATS.
From: Clive Lin <clive at tongi.org>
To: Giorgos Keramidas <keramida at freebsd.org>
Cc: bug-followup at freebsd.org
Subject: Re: misc/73959: Teach periodic(8) to understand pf(4) denied packets
Date: Mon, 15 Nov 2004 15:59:14 +0800
On Mon, Nov 15, 2004 at 07:43:01AM +0200, Giorgos Keramidas wrote:
> : +# Copyright (c) 2001 The FreeBSD Project
> : +# All rights reserved.
>
> The date is a bit off here :-)
>
> I only wanted to add that the periodic.conf.5 manpage must be updated
> too, if there are changes to the list of supported variables / options.
Argh. I missed both 2 parts.
Alright, updated diff:
http://people.freebsd.org/~clive/dist/periodic_security_520_pfdenied.diff
http://people.freebsd.org/~clive/dist/periodic.conf.5.diff
Previous version hides the rules. This one fixes that. The nawk stuff
is, err, nasty, but the result should be acceptable:
pf denied packets:
> block drop log on rl0 proto tcp all [ Evaluations: 504986 Packets: 0 Bytes: 0 States: 0 ]
> block drop log on rl0 all [ Evaluations: 18559 Packets: 427 Bytes: 140578 States: 0 ]
--
Clive Tong-I Lin | http://tongi.org | PGP KeyID: A008C03E
More information about the freebsd-bugs
mailing list