Re: How to export / save and compare PF rule sets

Max Laier wrote: On Wednesday 23 December 2009 00:50:09 Miroslav Lachman wrote: scrub is before nat/rdr rules in case of "pfctl -s a" and after nat/rdr in case of "pfctl -nvf /etc/pf.conf" The order should always be options, scrub, queues, nat, filters. pfctl -nvf only works with a different

Re: How to export / save and compare PF rule sets

On Wednesday 23 December 2009 00:50:09 Miroslav Lachman wrote: > scrub is before nat/rdr rules in case of "pfctl -s a" and after nat/rdr > in case of "pfctl -nvf /etc/pf.conf" The order should always be options, scrub, queues, nat, filters. pfctl -nvf only works with a different order if you hav

How to export / save and compare PF rule sets

Hi, I am planning to write script to check PF rulesets and send e-mail / SMS alerts on changes. I am planning to check rules periodically, on boot and save "current" state on shutdown. Compare rules on boot with state on shutdown and report differences, and check differences of current rules co

Re: kern/141905: [pf] [panic] pf kernel panic on 7.2-RELEASE with empty pf.conf

Old Synopsis: pf kernel panic on 7.2-RELEASE with empty pf.conf New Synopsis: [pf] [panic] pf kernel panic on 7.2-RELEASE with empty pf.conf Responsible-Changed-From-To: freebsd-amd64->freebsd-pf Responsible-Changed-By: linimon Responsible-Changed-When: Tue Dec 22 22:31:27 UTC 2009 Responsible-Cha

Re: Ruleset causing problems with N95?

I'm not using a PPPoE client that I'm aware of... Phone -> Wireless -> router My router has UPnP enabled which I thought might have helped but it doesn't :( I just googled for 'n95 fix-mss' and all I got was this mail on kernaltrap.. was surprised it appeared so fast! I added some tcp reassembl