> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of pichi > Sent: Tuesday, 18 September 2007 4:05 PM > To: [email protected] > Subject: Re: Define hosts lookup for pf.conf > > Dave, > > Thanks so much for your help. I have never touched perl but I > will give it a try. Still, I have other questiones:
You're welcome. > 1. What software will I need to install on the firewalll in > order for this script to work? Perl is part of the default install. If you save the script somewhere in your path (/usr/local/bin/ works) and make it executable (chmod 755 whatever_you_call_it.pl), then you will be able to call it like: # pfctl -s state | whatever_you_call_it.pl > 2. Is there any danger in having this kind of software on a publically > accessable firewall? Perl is kick-ass magic that once you're half way up the learning curve, you wonder how the hell you ever lived without it.. In my view, there is no risk in having it installed on a firewall and there are many benefits. Frankly I'd be amazed if it isn't already there :-) ciao dave --- Dave Edwards
