[Bug 206467] 520.pfdenied does not reset counters every day

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206467

--- Comment #3 from Oleksandr Tymoshenko  ---
There is a commit referencing this PR, but it's still not closed and has been
inactive for some time. Closing the PR as fixed but feel free to re-open it if
the issue hasn't been completely resolved.

Thanks

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 206467] 520.pfdenied does not reset counters every day

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206467

Oleksandr Tymoshenko  changed:

   What|Removed |Added

 CC||go...@freebsd.org
 Status|New |Closed
 Resolution|--- |FIXED

--- Comment #2 from Oleksandr Tymoshenko  ---
There is a commit referencing this PR, but it's still not closed and has been
inactive for some time. Closing the PR as fixed but feel free to re-open it if
the issue hasn't been completely resolved.

Thanks

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 206467] 520.pfdenied does not reset counters every day

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206467

--- Comment #1 from commit-h...@freebsd.org ---
A commit references this bug:

Author: lidl
Date: Tue Feb  9 21:00:39 UTC 2016
New revision: 295452
URL: https://svnweb.freebsd.org/changeset/base/295452

Log:
  Zero pf rule counters so daily reports make sense

  Zero pf rule counters so that each daily report lists an absolute
  number of rejected packets, not the total since the last time the
  machine rebooted (or the counters were manually cleared).

  PR:   206467
  Submitted by: Rick Adams
  Approved by:  rpaulo (mentor)
  Differential Revision:https://reviews.freebsd.org/D5172

Changes:
  head/etc/periodic/security/520.pfdenied

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 206467] 520.pfdenied does not reset counters every day

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206467

Bug ID: 206467
   Summary: 520.pfdenied does not reset counters every day
   Product: Base System
   Version: 11.0-CURRENT
  Hardware: Any
OS: Any
Status: New
  Severity: Affects Many People
  Priority: ---
 Component: conf
  Assignee: freebsd-bugs@FreeBSD.org
  Reporter: r...@cello.net

Created attachment 165917
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=165917=edit
520.pfdenied patch to add -z flag

/etc/periodic/security/520.pfdenied produces reports based on /var/log/pf.today
and /var/log/pf.yesterday

This implies that the counts in the report are for one day only.

The counter is never reset, so the counts are cumulative and therefore not
particularly useful as reported.

Add the "-z" flag to the pfctl command in 520.pf.denied so that the stats are
zeroed daily

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

[Bug 206467] 520.pfdenied does not reset counters every day

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206467

Mark Linimon  changed:

   What|Removed |Added

   Keywords||patch

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"