From owner-freebsd-pf@FreeBSD.ORG  Mon Dec 21 09:03:16 2009
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 42D32106566C
	for <freebsd-pf@freebsd.org>; Mon, 21 Dec 2009 09:03:16 +0000 (UTC)
	(envelope-from tom@uffner.com)
Received: from eris.uffner.com (uffner.com [66.208.243.25])
	by mx1.freebsd.org (Postfix) with ESMTP id A6CB68FC0A
	for <freebsd-pf@freebsd.org>; Mon, 21 Dec 2009 09:03:15 +0000 (UTC)
Received: from xiombarg.uffner.com
	(static-71-162-143-94.phlapa.fios.verizon.net [71.162.143.94])
	(authenticated bits=0)
	by eris.uffner.com (8.14.3/8.14.3) with ESMTP id nBL95Mgk032268
	(version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256
	verify=FAIL); Mon, 21 Dec 2009 04:05:29 -0500 (EST)
	(envelope-from tom@uffner.com)
Message-ID: <4B2F39CA.5060805@uffner.com>
Date: Mon, 21 Dec 2009 04:03:06 -0500
From: Tom Uffner <tom@uffner.com>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US;
	rv:1.9.1.6) Gecko/20091217 SeaMonkey/2.0.1
MIME-Version: 1.0
To: Gaurav Ghimire <gaurav@subisu.net.np>
References: <4B2F0E9D.7020603@subisu.net.np>
In-Reply-To: <4B2F0E9D.7020603@subisu.net.np>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-pf@freebsd.org
Subject: Re: External scripts with PF.
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Dec 2009 09:03:16 -0000

Gaurav Ghimire wrote:
> Are there any possibilities that I could run a script (bash, perl) when
> any rule is matched.

make sure the rule you want to trigger your script includes "log".

have your script tail pflog, and watch for your trigger rule before
performing its action.