On Nov 3, 2005, at 8:17 AM, Markus Wernig wrote:
Well, the only use that came to my mind was a perl daemon running
on the
FW that accepts rule updates from a remote client. While that can be
done with other means (ssh, sh scripts), i can imagine that a perl
class
for manipulating pf rules would come in handy for that.
/m
Putting something listening on the network means now you've got to do
encryption, authentication, verification, etc.. Seems like a lot of
work for potentially not a lot of gain, at least IMO. I'd rather
rely on ssh, keys, sudo, and scripts to do it.
-Chad
