From owner-freebsd-pf@FreeBSD.ORG  Tue Oct 16 14:25:28 2007
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C51A716A418
	for <freebsd-pf@freebsd.org>; Tue, 16 Oct 2007 14:25:28 +0000 (UTC)
	(envelope-from max@love2party.net)
Received: from moutng.kundenserver.de (moutng.kundenserver.de
	[212.227.126.174])
	by mx1.freebsd.org (Postfix) with ESMTP id 7857213C461
	for <freebsd-pf@freebsd.org>; Tue, 16 Oct 2007 14:25:28 +0000 (UTC)
	(envelope-from max@love2party.net)
Received: from amd64.laiers.local (dslb-088-064-187-160.pools.arcor-ip.net
	[88.64.187.160])
	by mrelayeu.kundenserver.de (node=mrelayeu8) with ESMTP (Nemesis)
	id 0ML31I-1IhnML1R8u-0008C0; Tue, 16 Oct 2007 16:25:25 +0200
From: Max Laier <max@love2party.net>
Organization: FreeBSD
To: freebsd-pf@freebsd.org
Date: Tue, 16 Oct 2007 16:25:09 +0200
User-Agent: KMail/1.9.7
References: <233439.39754.qm@web53710.mail.re2.yahoo.com>
In-Reply-To: <233439.39754.qm@web53710.mail.re2.yahoo.com>
X-Face: ,,8R(x[kmU]tKN@>gtH1yQE4aslGd<hB5S>u+2];
	R]*pL,U>^H?)gW@49@wdJ`H<=?utf-8?q?=25=7D*=5FBD=0A=09U=5For=3D=5CmOZf764=26nYj=3DJYbR1PW0ud?=>|!~,,CPC.1-D$FG@0h3#'5"k{V]a~.<=?utf-8?q?mZ=7D44=23Se=7Em=0A=09Fe=7E=5C=5DX5B=5D=5Fxj?=(ykz9QKMw_l0C2AQ]}Ym8)fU
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="nextPart1377065.livWW0zj2I";
	protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <200710161625.22666.max@love2party.net>
X-Provags-ID: V01U2FsdGVkX1/bbfp/FcE2LmLQLv23oIsnmG/niNRh7IHyWFC
	qRROdmg2w/HYW2UBldTzHvHnTS0mld1GUNL/RWWHHc+hl0HRZX
	d0zO1zmkyw2uQ03JDNx0syCDsoSqTJv7NXk7bhZ/rE=
Cc: 
Subject: Re: PF and UID
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Oct 2007 14:25:28 -0000

--nextPart1377065.livWW0zj2I
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Tuesday 16 October 2007, Lorenz Helleis wrote:
> Hello...
>
>  Can I create a rule using PF and UID ?
>
> like this:
>
>  " permit uid 1005 tcp port 22 "
>
> thanks

The syntax is very different, but yes - pf does support matching by user=20
credentials on the socket in question.  The pf.conf(5) man page explains=20
in detail.  Look for the "user"/"group" modifiers.

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart1377065.livWW0zj2I
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)

iD8DBQBHFMnSXyyEoT62BG0RAr2KAJ0Vf4Xu60fwfFGUzk07B7X5jHuLtwCcCIoF
7M2zy3STPhwnX785eLh9kTw=
=uf6B
-----END PGP SIGNATURE-----

--nextPart1377065.livWW0zj2I--