misc/73959: Teach periodic(8) to understand pf(4) denied packets

[Clive Lin]

The following reply was made to PR conf/73959; it has been noted by GNATS.

From: Clive Lin <clive at tongi.org>
To: Giorgos Keramidas <keramida at freebsd.org>
Cc: bug-followup at freebsd.org
Subject: Re: misc/73959: Teach periodic(8) to understand pf(4) denied packets
Date: Mon, 15 Nov 2004 15:59:14 +0800

 On Mon, Nov 15, 2004 at 07:43:01AM +0200, Giorgos Keramidas wrote:
 > : +# Copyright (c) 2001  The FreeBSD Project
 > : +# All rights reserved.
 > 
 > The date is a bit off here :-)
 > 
 > I only wanted to add that the periodic.conf.5 manpage must be updated
 > too, if there are changes to the list of supported variables / options.
 
 Argh. I missed both 2 parts.
 
 Alright, updated diff:
 
 http://people.freebsd.org/~clive/dist/periodic_security_520_pfdenied.diff
 http://people.freebsd.org/~clive/dist/periodic.conf.5.diff
 
 Previous version hides the rules. This one fixes that. The nawk stuff
 is, err, nasty, but the result should be acceptable:
 
  pf denied packets:
 > block drop log on rl0 proto tcp all [ Evaluations: 504986 Packets: 0 Bytes: 0 States: 0 ]
 > block drop log on rl0 all [ Evaluations: 18559 Packets: 427 Bytes: 140578 States: 0 ]
 
 -- 
 Clive Tong-I Lin | http://tongi.org | PGP KeyID: A008C03E