pfctl & portsentry

Jeremy C. Reed plug-discuss@lists.plug.phoenix.az.us
Sat, 15 Mar 2003 23:19:39 -0800 (PST)


On Sun, 16 Mar 2003, Mike Starke wrote:

> "/bin/echo 'block in log on $EXT_IF from xxx.xxx.xxx.xxx/32 to any' |
> /sbin/pfctl -f -"
>
> The problem is that is wipes out any existing rules (and nat/rdr). Is

The "-f" reloads rules.

Add the pfctl "-Ta" (or "-T add") switch to add new rules.

   Jeremy C. Reed
   http://bsd.reedmedia.net/