From owner-freebsd-pf@FreeBSD.ORG Thu Jul 20 00:10:18 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 266B116A4EA for ; Thu, 20 Jul 2006 00:10:18 +0000 (UTC) (envelope-from solinym@gmail.com) Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.181]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8DC6143D46 for ; Thu, 20 Jul 2006 00:10:17 +0000 (GMT) (envelope-from solinym@gmail.com) Received: by py-out-1112.google.com with SMTP id b29so570620pya for ; Wed, 19 Jul 2006 17:10:17 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=qTKfPJDze1jLviIFdolvEGue9y8PoLxuJ0JO+QDL3jQaAh/0Y5gDJcDP5RK7bVLgDOYdogT4TaykoaubYv6N4XUsO9VYbuAR3YAVezwFxtW4zP4gutqZ+btaGDz7thlzv2YlNyJsD1pjX7UkFTdlpV7jQw4yo2rUJhCvLd+Np40= Received: by 10.35.135.12 with SMTP id m12mr2028464pyn; Wed, 19 Jul 2006 17:10:16 -0700 (PDT) Received: by 10.35.34.13 with HTTP; Wed, 19 Jul 2006 17:10:16 -0700 (PDT) Message-ID: Date: Wed, 19 Jul 2006 19:10:16 -0500 From: "Travis H." To: "Rajkumar S" In-Reply-To: <64de5c8b0607182335q4fae2ed9w233f2ea6438504ad@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <64de5c8b0607181030h64d7d539r788ba7bbc6841e4d@mail.gmail.com> <200607181950.10304.max@love2party.net> <64de5c8b0607182335q4fae2ed9w233f2ea6438504ad@mail.gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: Program to add/delete a rule from pf X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jul 2006 00:10:18 -0000 On 7/19/06, Rajkumar S wrote: > Thanks for the link, but there are couple of problems preventing me > from using it. > 1. ... Zope and Twisted A valid concern, they are a bit much for the task. Strictly speaking, it's only the ZopeInterface code, and the base Twisted code, but yeah, it's a bit bulky overall. > 2. The license of the code does not permit me to contribute it back to > snortsam, which BSD licenced. You can certainly take the example script and make a similar one without violating it... of course, then users would have to use dfd_keeper to take advantage of the script. The license is not set in stone; my current feeling is that if nobody will pay me to do earn a living, then they don't deserve the fruits of my obsession^W largesse. One day everything I wrote was BSD-licensed, but a prolonged period of unemployment left me relatively bitter. > btw, is there any other program (other than pfctl) that interfaces > with pf using ioctl to add a rule (not a table entry) so that I can > look into the code? Check out these links for possibilities: http://www.benzedrine.cx/pf.html https://solarflux.org/pf/ -- ``I am not a pessimist. To perceive evil where it exists is, in my opinion, a form of optimism.'' -- Roberto Rossellini http://www.lightconsulting.com/~travis/ -><- GPG fingerprint: 9D3F 395A DAC5 5CCC 9066 151D 0A6B 4098 0C55 1484