Questions about tables on pf

2010-04-29 Thread Leonardo Carneiro - Veltrac
Hello everyone. I have a table in my pf.conf: table ips_allowed persist const file /etc/pf.conf.d/ips_allowed If I add or remove IPs from this file mannualy, will the firewall be aware of such changes or do i need to reload pf? Also, pf do map this file in memory or does it read from the

Re: Questions about tables on pf

2010-04-29 Thread Gregory Edigarov
On Thu, 29 Apr 2010 10:15:08 -0300 Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br wrote: Hello everyone. I have a table in my pf.conf: table ips_allowed persist const file /etc/pf.conf.d/ips_allowed If I add or remove IPs from this file mannualy, will the firewall be aware of

Re: Questions about tables on pf

2010-04-29 Thread Otto Moerbeek
On Thu, Apr 29, 2010 at 10:15:08AM -0300, Leonardo Carneiro - Veltrac wrote: Hello everyone. I have a table in my pf.conf: table ips_allowed persist const file /etc/pf.conf.d/ips_allowed If I add or remove IPs from this file mannualy, will the firewall be aware of such changes or do i

Re: Questions about tables on pf

2010-04-29 Thread Peter N. M. Hansteen
Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br writes: If I add or remove IPs from this file mannualy, will the firewall be aware of such changes or do i need to reload pf? You can check what actually happens easily after editing the file by comparing the output of $ sudo pfctl -t

Re: Questions about tables on pf

2010-04-29 Thread Leonardo Carneiro - Veltrac
Gregory Edigarov wrote: On Thu, 29 Apr 2010 10:15:08 -0300 Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br wrote: Hello everyone. I have a table in my pf.conf: table ips_allowed persist const file /etc/pf.conf.d/ips_allowed If I add or remove IPs from this file mannualy, will the

Re: Questions about tables on pf

2010-04-29 Thread Leonardo Carneiro - Veltrac
Otto Moerbeek wrote: On Thu, Apr 29, 2010 at 10:15:08AM -0300, Leonardo Carneiro - Veltrac wrote: this file in memory or does it read from the disk for every packet? Neither. The addresses are loaded in kernel memory via pfctl. -Otto Tks. This info is very important to me

Re: Questions about tables on pf

2010-04-29 Thread Lars Nooden
On Thu, 29 Apr 2010, Leonardo Carneiro - Veltrac wrote: Tks. This info is very important to me 'cause my disk sucks, Look at the manual page for mount_mfs(8) and the option -P you can load a directory and the files in it into memory. and i'll have to create some tables that will be hitted

Re: Questions about tables on pf

2010-04-29 Thread Leonardo Carneiro - Veltrac
Lars Nooden wrote: On Thu, 29 Apr 2010, Leonardo Carneiro - Veltrac wrote: Tks. This info is very important to me 'cause my disk sucks, Look at the manual page for mount_mfs(8) and the option -P you can load a directory and the files in it into memory. and i'll have to create some tables