From owner-freebsd-questions@FreeBSD.ORG Thu Aug 28 07:06:58 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 76EEA106566B for ; Thu, 28 Aug 2008 07:06:58 +0000 (UTC) (envelope-from lists@sequestered.net) Received: from alcatraz.sequestered.net (alcatraz.sequestered.net [24.199.11.2]) by mx1.freebsd.org (Postfix) with ESMTP id 5C6ED8FC08 for ; Thu, 28 Aug 2008 07:06:58 +0000 (UTC) (envelope-from lists@sequestered.net) Received: from Singularity.dyn.wh.reachlocal.com (rrcs-67-52-96-162.west.biz.rr.com [67.52.96.162]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jay@sequestered.net) by alcatraz.sequestered.net (Postfix) with ESMTPSA id A2D9C67FF4; Wed, 27 Aug 2008 23:51:05 -0700 (PDT) Message-ID: <48B64AD8.8060000@sequestered.net> Date: Wed, 27 Aug 2008 23:51:04 -0700 From: Jay Chandler User-Agent: Thunderbird 2.0.0.16 (Macintosh/20080707) MIME-Version: 1.0 To: Michael Lednev References: <48B64A7E.2050900@mail.ru> In-Reply-To: <48B64A7E.2050900@mail.ru> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-SEQUESTERED-NET-MailScanner-Watermark: 1220511068.16233@BT/iBBhe93pd0OPFo9kWWw X-SEQUESTERED-NET-MailScanner-Information: Please contact Sequestered.net support for more information X-MailScanner-ID: A2D9C67FF4.C8316 X-SEQUESTERED-NET-MailScanner: Found to be clean X-SEQUESTERED-NET-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=0.6, required 6, J_CHICKENPOX_23 0.60) X-SEQUESTERED-NET-MailScanner-From: lists@sequestered.net X-Spam-Status: No Cc: FreeBSD Questions Subject: Re: PF rules evaluation X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Aug 2008 07:06:58 -0000 Michael Lednev wrote: > Hello. > > Is there some tool to test rules-file for PF with arbitrary packets > without need for real traffic? Yes. It's called netcat (nc on most systems). -- Jay Chandler / KB1JWQ Living Legend / Systems Exorcist Today's Excuse: Second-system effect