pfctl & portsentry

On Sun, 16 Mar 2003, Mike Starke wrote:

> "/bin/echo 'block in log on $EXT_IF from xxx.xxx.xxx.xxx/32 to any' |
> /sbin/pfctl -f -"
>
> The problem is that is wipes out any existing rules (and nat/rdr). Is

The "-f" reloads rules.

Add the pfctl "-Ta" (or "-T add") switch to add new rules.

Jeremy C. Reed
http://bsd.reedmedia.net/