Date: Fri, 14 Sep 2012 17:27:25 +0400 From: Gleb Smirnoff <glebius@FreeBSD.org> To: Olivier Cochard-Labb? <olivier@cochard.me> Cc: freebsd-pf@FreeBSD.org Subject: Re: Patch for adding "options PF_DEFAULT_TO_DROP" to kernel configuration file Message-ID: <20120914132725.GG85604@FreeBSD.org> In-Reply-To: <CA%2Bq%2BTcqL1e=SLa7fUXpCa5Lpospj0F=%2BcfLnAjWDwHFVFxjAMw@mail.gmail.com> References: <CA%2Bq%2BTcqL1e=SLa7fUXpCa5Lpospj0F=%2BcfLnAjWDwHFVFxjAMw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Sep 13, 2012 at 11:26:48PM +0200, Olivier Cochard-Labb? wrote: O> Hi, O> here is a little patch (tested on FreeBSD 9.1-RC1) that add a new O> option to the kernel configuration file: O> options PF_DEFAULT_TO_DROP O> O> Without this option, with an empty pf.conf:šAll traffic are permit. O> With this option enabled, with an empty pf.conf: All traffic are O> dropped by default. O> O> If the attached file is removed, you can found the patch here: O> http://www.freebsd.org/cgi/query-pr.cgi?pr=171622 I'd appreciate if you re-submit your patch with: - update to the fresh head/, where pf has been moved to netpfil/pf - mentioning new option in pf(4) -- Totus tuus, Glebius.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120914132725.GG85604>