From owner-freebsd-pf@FreeBSD.ORG Sun Jan 10 04:48:39 2010 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 08EFA10657A0 for ; Sun, 10 Jan 2010 04:48:39 +0000 (UTC) (envelope-from jhellenthal@gmail.com) Received: from mail-yx0-f171.google.com (mail-yx0-f171.google.com [209.85.210.171]) by mx1.freebsd.org (Postfix) with ESMTP id B3F448FC14 for ; Sun, 10 Jan 2010 04:48:37 +0000 (UTC) Received: by yxe1 with SMTP id 1so19145652yxe.3 for ; Sat, 09 Jan 2010 20:48:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:sender:date:from:to:cc :subject:in-reply-to:message-id:references:user-agent :x-openpgp-key-id:x-openpgp-key-fingerprint:mime-version :content-type; bh=BGLtjlr2eDLS/byWjNgoNmxSOfmcYC+NZkwukGGokZ0=; b=q9+GcbARqQw/S7gynDNO/MdmYUpTByP77Zf1e7sUZHtoGML7WuPWvtaJRvAe0BrnMQ u4RjnJYuy4q//dt+oGGLaik41UytO38PHS826Hok4+Sqc5jW6gsq3Dksk3f36vvrGvJQ I3fJxLiHriKbIPOtHdsQWqWICeTtAMP4aGD44= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=sender:date:from:to:cc:subject:in-reply-to:message-id:references :user-agent:x-openpgp-key-id:x-openpgp-key-fingerprint:mime-version :content-type; b=QXpnvh7gfF1IUfXW8CMl1TN5cFvvT0ETPPuG9W0B15Zgbak/pG2T6Y1rmInVILRjPp 7bWBje8RGRRlRZ6QkDos6jbtumW45OJVbEcgvIiYXLgeAAe4E/wNXjGjJ1oy51CyQ09s JdQxJ4KeSXgKOskwYyAhHA0cTaxVsix9sTXEk= Received: by 10.101.4.28 with SMTP id g28mr6080661ani.192.1263098910776; Sat, 09 Jan 2010 20:48:30 -0800 (PST) Received: from ppp-21.185.dialinfree.com (ppp-21.185.dialinfree.com [209.172.21.185]) by mx.google.com with ESMTPS id 21sm477609iwn.10.2010.01.09.20.47.46 (version=TLSv1/SSLv3 cipher=RC4-MD5); Sat, 09 Jan 2010 20:48:29 -0800 (PST) Sender: "J. Hellenthal" Date: Sat, 9 Jan 2010 23:44:55 -0500 From: jhell To: Alex Povolotsky In-Reply-To: <4B48E927.1030706@webmail.sub.ru> Message-ID: References: <4AEC4A6F65A84D258332A61EF5980850@john> <9a542da30912110411g6d332409h9db4664b73ee1153@mail.gmail.com> <4B48E065.8070307@webmail.sub.ru> <4B48E927.1030706@webmail.sub.ru> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) X-OpenPGP-Key-Id: 0x89D8547E X-OpenPGP-Key-Fingerprint: 85EF E26B 07BB 3777 76BE B12A 9057 8789 89D8 547E MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-pf@freebsd.org Subject: Re: FW: clientNatLookup: PF open failed: (13) Permission denied X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Jan 2010 04:48:39 -0000 On Sat, 9 Jan 2010 15:37, tarkhil@ wrote: > On 01/09/10 23:00, Alex Povolotsky wrote: >> Well, what is the proper way to chgrp squid /dev/pf and chmod g+r /dev/pf >> automatically? Nothing better than rc.local or patching >> /usr/local/etc/rc.d/squid? > > Quite simple; I should figure it out at once. > > use devd.conf > > Alex. > In /etc/devfs.rules Something like: [system=10] add path 'pf' mode 0660 group pfreader And then in /etc/rc.conf Add: devfs_system_ruleset="system" These are just examples but based on what I am using for some other devices. Best of luck. -- Sat Jan 9 23:41:53 2010 jhell