portsnap in cron and firewall

[RW]

On Fri, 5 Sep 2008 16:49:26 +0100
RW <fbsd06 at mlists.homeunix.com> wrote:

> On Fri, 5 Sep 2008 16:14:02 +0200
> Albert Shih <Albert.Shih at obspm.fr> wrote:
> 
But now with portsnap cron (that's mean random sleep) I don't known
> > when the system try to connect outside. 

> You can do this
> 
> sleep `jot -r  1 0 3599`
> <open pf>
> portsnap fetch
> <close pf>
>

Actually, I just took a look at portsnap and I see that "portsnap fetch"
has an explicit check for a terminal, so it wont work from crontab.

> 
> However, I would suggest you simply create pf rules to allow the
> server contact to the portsnap servers.