Module Name: src
Committed By: christos
Date: Wed Feb 5 20:22:26 UTC 2025
Modified Files:
src/external/bsd/blocklist: TODO
Log Message:
PR/21: robohack: remove dup entries
To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 src/external/bsd/blocklist/TODO
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/external/bsd/blocklist/TODO
diff -u src/external/bsd/blocklist/TODO:1.2 src/external/bsd/blocklist/TODO:1.3
--- src/external/bsd/blocklist/TODO:1.2 Sat Mar 6 19:46:39 2021
+++ src/external/bsd/blocklist/TODO Wed Feb 5 15:22:26 2025
@@ -1,4 +1,4 @@
-# $NetBSD: TODO,v 1.2 2021/03/07 00:46:39 christos Exp $
+# $NetBSD: TODO,v 1.3 2025/02/05 20:22:26 christos Exp $
- don't poll periodically, find the next timeout
- use the socket also for commands? Or separate socket?
@@ -62,46 +62,3 @@
}
or is there a better way?
-
-- figure out some way to do distributed operation securely (perhaps with
- a helper daemon that authenticates local sockets and then communicates
- local DB changes to the central server over a secure channel --
- perhaps blocklistd-helper can have a back-end that can send updates to
- a central server)
-
-- add "blocklistd -l" to enable filter logging on all rules by default
-
-- add some new options in the config file
-
- "/all" - block both TCP and UDP (on the proto field?)
-
- "/log" - enable filter logging (if not the default) (on the name field?)
- "/nolog"- disable filter logging (if not the default) (on the name field?)
-
- The latter two probably require a new parameter for blocklistd-helper.
-
-- "blocklistd -f" should (also?) be a blocklistctl function!?!?!
-
-- if blocklistd was started with '-r' then a SIGHUP should also do a
- "control flush $rulename" and then re-add all the filter rules?
-
-- should/could /etc/rc.conf.d/ipfilter be created with the following?
-
- reload_postcmd=blocklistd_reload
- start_postcmd=blocklistd_start
- stop_precmd=blocklistd_stop
- blocklistd_reload ()
- {
- /etc/rc.d/blocklistd reload # IFF SIGHUP does flush/re-add
- # /etc/rc.d/blocklistd restart
- }
- blocklistd_stop ()
- {
- /etc/rc.d/blocklistd stop
- }
- blocklistd_start ()
- {
- /etc/rc.d/blocklistd start
- }
-
- or is there a better way?
