PF rule-sets are a very good idea - also include context - like
bridgename.if files

should<->there be categories - like PF with: transparent bridging,
ftp-proxy, 802.11, email filtering.....

good idea - I can learn lots from something like this - Ed

-----Original Message-----
From: Jason Houx [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 07, 2003 2:39 PM
To: Daniel Hartmeier
Cc: Adam Shephard; [EMAIL PROTECTED]
Subject: Re: Compendium of pf rules (Was: RFC#1 - chmod pf.conf )


Daniel & pf list

        I like this idea { wiki } that is.  Using the list would be fine 
but the wiki is better.  I have been using pf since 3.0 and have a pretty 
solid feel for --current and --stable rule-sets and think this would be a 
good chance to get some community rule-sets ready for examples, seeing how 
a lot has been added to pf since 3.2 props to you pf developers.

just my .02¢ on this subject.

Jason Houx


On Fri, 7 Feb 2003, Daniel Hartmeier wrote:

> On Fri, Feb 07, 2003 at 09:51:48AM -0800, Adam Shephard wrote:
> 
> > They asked all of their users who were using IPTABLES
> > to send in their list of rules with clear comments
> > explaining each rules. Once it looked like everything
> > was received, they sent out a zip files containing all
> > the files.
> > 
> > Any interest in something like that for pf?
> 
> I can't speak for the subscribers, you'd have to comment on whether
> you'd like to do this on the mailing list itself.
> 
> Maybe a Wiki like http://www.obsd.pronym.org/wiki/ would be simpler,
> people could just put their rulesets on a page and others could edit
> them and add comments inline.
> 
> We tend to get a fair amount of requests of the type "here's my ruleset,
> please comment on it". If everyone is willing to contribute their
> comments (and not just post their rulesets, waiting for comments, not
> reading other poster's rules), I guess it would be useful, and we might
> collect the most interesting rulesets for the documentation.
> 
> So, I'm willing to contribute, but I'm not offering to review two dozen
> uncommented production rulesets all by myself :)
> 
> Daniel
> 

Reply via email to