[PATCH] New feature in Packet Filter

[Ermal Luçi]

On Thu, Apr 7, 2011 at 10:21 AM, Quentin Narvor
<quentin.narvor at gmail.com> wrote:
> Hello,
>
> My name is Quentin Narvor and I am currently working on intrusion detection.
> I use Freebsd 8.2 and I recently needed pf to be able to dynamically fill in
> tables according pass rule.
>
> For performances reasons, I didn't want to do it with a script and pfctl.
> Then, with the help of Mr Nicolas Greneche, I made this patch named "add".
> It enables pf to add src ip or dst ip in a table when a match occurs on a
> pass rule.
>

I cannot see, apart collecting ips in tables, anything else that
cannot be done through pf(4) tags!
Can you please describe a use case for this patch?


> I submit this patch to your attention. Is this feature is of interest to be
> added in PF mainstream ?
>
> You will find the patch and its documentation in attachment.
> Let me know if you think that some modifications are needed.
>
> Best regards,
>
> Quentin Narvor
>
> _______________________________________________
> freebsd-net at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>



-- 
Ermal