Date: Wed, 18 Sep 2002 23:59:30 +0200 From: Thomas Quinot <thomas@cuivre.fr.eu.org> To: freebsd-current@freebsd.org Subject: Code factoring in /etc/periodic/security firewall checks Message-ID: <20020918235930.D58595@melusine.cuivre.fr.eu.org>
next in thread | raw e-mail | index | archive | help
Being a user of ipfilter, I always longed for it to benefit from the same treatment as ipfw in daily security checks, so I undertook the implementation of an ipf equivalent of 500.ipfwdenied. In the course of that, I noticed that much of that script was non-trivial *and* duplicated wrt 600.ip6fwdenied *and* would be duplicated in my own ipfdenied script. Consequently, I would like to propose that most of the complexity of these scripts be factored out into a common file, which could then also be harnessed for ipfilter. And since after moaning for a change I'd be expected to put my code where my mouth is, a patch against -CURRENT is available for your perusal and comments from: http://www.cuivre.fr.eu.org/~thomas/periodic-fw.diff Thomas. -- Thomas.Quinot@Cuivre.FR.EU.ORG To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020918235930.D58595>