From owner-freebsd-bugs@FreeBSD.ORG  Mon Nov 15 08:00:45 2004
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5494116A4CE
	for <freebsd-bugs@hub.freebsd.org>;
	Mon, 15 Nov 2004 08:00:45 +0000 (GMT)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 42AD543D41
	for <freebsd-bugs@hub.freebsd.org>;
	Mon, 15 Nov 2004 08:00:45 +0000 (GMT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.11/8.12.11) with ESMTP id iAF80j2W046798
	for <freebsd-bugs@freefall.freebsd.org>; Mon, 15 Nov 2004 08:00:45 GMT
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.12.11/8.12.11/Submit) id iAF80jQk046797;
	Mon, 15 Nov 2004 08:00:45 GMT
	(envelope-from gnats)
Date: Mon, 15 Nov 2004 08:00:45 GMT
Message-Id: <200411150800.iAF80jQk046797@freefall.freebsd.org>
To: freebsd-bugs@FreeBSD.org
From: Clive Lin <clive@tongi.org>
Subject: 
	Re: misc/73959: Teach periodic(8) to understand pf(4) denied packets
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Clive Lin <clive@tongi.org>
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Nov 2004 08:00:45 -0000

The following reply was made to PR conf/73959; it has been noted by GNATS.

From: Clive Lin <clive@tongi.org>
To: Giorgos Keramidas <keramida@freebsd.org>
Cc: bug-followup@freebsd.org
Subject: Re: misc/73959: Teach periodic(8) to understand pf(4) denied packets
Date: Mon, 15 Nov 2004 15:59:14 +0800

 On Mon, Nov 15, 2004 at 07:43:01AM +0200, Giorgos Keramidas wrote:
 > : +# Copyright (c) 2001  The FreeBSD Project
 > : +# All rights reserved.
 > 
 > The date is a bit off here :-)
 > 
 > I only wanted to add that the periodic.conf.5 manpage must be updated
 > too, if there are changes to the list of supported variables / options.
 
 Argh. I missed both 2 parts.
 
 Alright, updated diff:
 
 http://people.freebsd.org/~clive/dist/periodic_security_520_pfdenied.diff
 http://people.freebsd.org/~clive/dist/periodic.conf.5.diff
 
 Previous version hides the rules. This one fixes that. The nawk stuff
 is, err, nasty, but the result should be acceptable:
 
  pf denied packets:
 > block drop log on rl0 proto tcp all [ Evaluations: 504986 Packets: 0 Bytes: 0 States: 0 ]
 > block drop log on rl0 all [ Evaluations: 18559 Packets: 427 Bytes: 140578 States: 0 ]
 
 -- 
 Clive Tong-I Lin | http://tongi.org | PGP KeyID: A008C03E