List Info

Thread: Proper way to update a pf table?




Proper way to update a pf table?
user name
2006-10-31 17:13:47
Joel Goguen wrote:
> I do something similar to this:
>
> pfctl -t local-white -T replace -f /path/to/whitelist
>
> Where local-white is my whitelist, and
/path/to/whitelist is the file
> containing whitelisted IP addresses or CIDRs, one per
line.
>
> On 10/31/06, Steve Williams <stevecelineandsteve.com> wrote:
>> Hi,
>>
>> I have a table of "whitelisted" hosts
that I can change on the fly as I
>> see email coming in that gets greylisted.  I add an
entry to the file,
>> then I try to reload the table.
>>
>> pfctl -t local-white -T load -f /etc/pf.conf
>>
>> Magically, pf seems to block most local access. 
ie:  telnet localhost
>> 25 times out, telnet localhost 3306 times out..
>>
>> If I use a sledge hammer:
>> pfctl -Fa -f /etc/pf.conf
>>
>> The system resumes "normal" activity.
>>
>> My relevant entry in the pf.conf is:
>>
>> table <local-white> persist file
"/etc/spamd/whitelist.txt"
>> rdr on $ext_if proto tcp from <local-white>
to any port smtp ->
>> $int_mcafe_webshield
>>
>> Is there a "proper" way to update a pf
table that resides in a file?
>>
>> Thanks,
>> Steve Williams
>>
>>
>
>
Thanks!  Works for me too!  

[1]

about | contact  Other archives ( Real Estate discussion Medical topics )