On 14:48, Wed 22 Feb 06, Chris Smith wrote:
> In addition to preventing infected PC's from using their own SMTP engine
> to send out spam by blocking port 25 from all but the mail server. I
> would also like to add those hosts automatically to a table in order to
> block their access altogether
> If you have any other uses for changing firewall rules dynamically,
> then I'd love to hear them! dfd_keeper can already peacefully coexist
> with anchors and tables
I don't know if you remember a discussion from several months
back, but the ability to change pf rules on the fly, reliably,
Didn't notice this was to the list too.
As I said to the OP, I use asynchronous I/O; there is one
in-user-memory image of what the rules should look like, and multiple
clients are all simultaneously handled by one thread. Commands to the
daemon are atomic, and commits to pfctl will commit the ent