Program to add/delete a rule from pf

[Travis H.]

On 7/19/06, Rajkumar S <rajkumars at gmail.com> wrote:
> Thanks for the link, but there are couple of problems preventing me
> from using it.

> 1. ... Zope and Twisted

A valid concern, they are a bit much for the task.  Strictly speaking,
it's only the ZopeInterface code, and the base Twisted code, but yeah,
it's a bit bulky overall.

> 2. The license of the code does not permit me to contribute it back to
> snortsam, which BSD licenced.

You can certainly take the example script and make a similar one
without violating it... of course, then users would have to use
dfd_keeper to take advantage of the script.  The license is not set in
stone; my current feeling is that if nobody will pay me to do earn a
living, then they don't deserve the fruits of my obsession^W largesse.
 One day everything I wrote was BSD-licensed, but a prolonged period
of unemployment left me relatively bitter.

> btw, is there any other program (other than pfctl) that interfaces
> with pf using ioctl to add a rule (not a table entry) so that I can
> look into the code?

Check out these links for possibilities:
http://www.benzedrine.cx/pf.html
https://solarflux.org/pf/
-- 
``I am not a pessimist.  To perceive evil where it exists is, in my
opinion, a form of optimism.'' -- Roberto Rossellini
http://www.lightconsulting.com/~travis/ -><-
GPG fingerprint: 9D3F 395A DAC5 5CCC 9066  151D 0A6B 4098 0C55 1484