Re: Script to sync pf rules for CARP fws

2006-11-15 Thread z0mbix
On 14/11/06, Leonardo Rodrigues de Mello <[EMAIL PROTECTED]> wrote: Here is one script i have done, you must setup ssh key authentication between root from fw1 to fw2 and fw1 to fw1. and must install bash. Why install bash? Just write the script properly so it works with ksh or another shell i

Re: Script to sync pf rules for CARP fws

2006-11-14 Thread Nick Holland
[EMAIL PROTECTED] wrote: ... ok, that's what one gets by doing silly stuff with too many mail clients at too many different places and getting sloppy about how one configures them. That was from me, in case anyone wasn't sure. :) Nick.

Re: Script to sync pf rules for CARP fws

2006-11-14 Thread user
C. L. Martinez wrote: > Hi all, > > Somebody knows where I can find a good shell script to sync pf.conf rules > over a several Openbsd firewalls using CARP? > > many thanks. yeah, on a few of my boxes here. :) No, I'm not going to post the script, on the grounds that people would probably be t

Re: Script to sync pf rules for CARP fws

2006-11-14 Thread Didier Wiroth
> Hi all, > > Somebody knows where I can find a good shell script to sync > pf.conf rules > over a several Openbsd firewalls using CARP? > > many thanks. Hello, For this to work, you need ssh-agent and to setup /usr/ports/sysutils/tentakel on your admin workstation. #!/bin/sh hosts[0]=172.16.42.

Re: RES: Script to sync pf rules for CARP fws

2006-11-14 Thread Stuart Henderson
On 2006/11/14 18:20, Leonardo Rodrigues de Mello wrote: > cp /etc/pf.conf /etc/pf.conf.orig > vi /etc/pf.conf > if pfctl -f /etc/pf.conf ... >echo "Restoring old configuration file" >cp /etc/pf.conf.orig /etc/pf.conf it's good that you check and restore, but if the box restarts between sav

Re: Script to sync pf rules for CARP fws

2006-11-14 Thread Marcus Popp
On 2006-11-14T18:43, C. L. Martinez wrote: > Sorry?? Do I need to run pfctl to load rules only on one fw under carp and > then this rules are sync to the others firewalls ?? If this is ok, then I > don't read pf's very well ... no, you have to run pfctl on every machine to activate changes in your

RES: Script to sync pf rules for CARP fws

2006-11-14 Thread Leonardo Rodrigues de Mello
d quick from edit.pf.sh" exit 1 fi else echo "Changes ABORTED By User" echo "Recovering old configuration file" sleep 1 mv /etc/pf.conf.orig /etc/pf.conf pfctl -f /etc/pf.conf echo "Exiting gracefully from editpf.sh" exit 0 fi --- -Mensagem o

Re: Script to sync pf rules for CARP fws

2006-11-14 Thread C. L. Martinez
Sorry?? Do I need to run pfctl to load rules only on one fw under carp and then this rules are sync to the others firewalls ?? If this is ok, then I don't read pf's very well ... On 11/14/06, Alexander Lind <[EMAIL PROTECTED]> wrote: > > no need to run pfctl on the other machines, if you are using

Re: Script to sync pf rules for CARP fws

2006-11-14 Thread Alexander Lind
no need to run pfctl on the other machines, if you are using pfsync, is there? alec z0mbix wrote: > On 14/11/06, C. L. Martinez <[EMAIL PROTECTED]> wrote: >> Hi all, >> >> Somebody knows where I can find a good shell script to sync pf.conf >> rules >> over a several Openbsd firewalls using CARP?

Re: Script to sync pf rules for CARP fws

2006-11-14 Thread z0mbix
On 14/11/06, C. L. Martinez <[EMAIL PROTECTED]> wrote: Hi all, Somebody knows where I can find a good shell script to sync pf.conf rules over a several Openbsd firewalls using CARP? many thanks. Surely a simple shell script using scp to copy the pf.conf to each host and ssh to run pfctl to

Re: Script to sync pf rules for CARP fws

2006-11-14 Thread Marcus Popp
On 2006-11-14T16:37, C. L. Martinez wrote: > Hi all, > > Somebody knows where I can find a good shell script to sync pf.conf rules > over a several Openbsd firewalls using CARP? for HOST in a b c d; do scp /etc/pf.conf $HOST:/etc/ done hth, Marcus.

Script to sync pf rules for CARP fws

2006-11-14 Thread C. L. Martinez
Hi all, Somebody knows where I can find a good shell script to sync pf.conf rules over a several Openbsd firewalls using CARP? many thanks.