From owner-freebsd-questions@FreeBSD.ORG Thu Jan 12 21:53:58 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CC1AF16A41F for ; Thu, 12 Jan 2006 21:53:58 +0000 (GMT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (imap.infracaninophile.co.uk [81.187.76.162]) by mx1.FreeBSD.org (Postfix) with ESMTP id 66D2543D46 for ; Thu, 12 Jan 2006 21:53:56 +0000 (GMT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from [IPv6:::1] (localhost [IPv6:::1]) by smtp.infracaninophile.co.uk (8.13.4/8.13.4) with ESMTP id k0CLrhlo017322; Thu, 12 Jan 2006 21:53:43 GMT (envelope-from m.seaman@infracaninophile.co.uk) Message-ID: <43C6CFE1.9000706@infracaninophile.co.uk> Date: Thu, 12 Jan 2006 21:53:37 +0000 From: Matthew Seaman Organization: Infracaninophile User-Agent: Mozilla Thunderbird 1.0.7 (X11/20051221) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Richard C. Isaacson" References: <3f1760601121328s74787a5cr@mail.gmail.com> <43C6CB1A.2040907@beldurnik.com> In-Reply-To: <43C6CB1A.2040907@beldurnik.com> X-Enigmail-Version: 0.93.0.0 Content-Type: multipart/signed; micalg=pgp-ripemd160; protocol="application/pgp-signature"; boundary="------------enig248D425390898EAFBC459ACB" X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (smtp.infracaninophile.co.uk [IPv6:::1]); Thu, 12 Jan 2006 21:53:44 +0000 (GMT) X-Virus-Scanned: ClamAV 0.87.1/1239/Thu Jan 12 11:36:22 2006 on happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00,NO_RELAYS autolearn=ham version=3.1.0 X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on happy-idiot-talk.infracaninophile.co.uk Cc: Vasile Cristescu , Dick Davies , freebsd-questions@freebsd.org Subject: Re: pf question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jan 2006 21:53:58 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig248D425390898EAFBC459ACB Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit Richard C. Isaacson wrote: > Dick Davies wrote: >> On 12/01/06, Vasile Cristescu wrote: >>> does pf has something like " ipfw -d show " ? >> I don't know. What does 'ipfw -d show' do? > Are you asking if you can print out rules? > pfctl -sr -v '-d' in ipfw includes the dynamic rules in the list output. The command the OP needs is: pfctl -ss -vv which prints the state table. Unlike ipfw(8), it's not in the same format as the rule list, but it tells you what you need to know. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW --------------enig248D425390898EAFBC459ACB Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDxs/n8Mjk52CukIwRA8fmAJ9Z5USjqRVKt6AjenQx9ahzwQcAsQCcCvNt Ni0odJCtKWJlkSsFGJr2py4= =sR0y -----END PGP SIGNATURE----- --------------enig248D425390898EAFBC459ACB--