On Thu, Apr 29, 2010 at 10:15:08AM -0300, Leonardo Carneiro - Veltrac wrote:
> Hello everyone.
>
> I have a table in my pf.conf:
>
> table <ips_allowed> persist const file "/etc/pf.conf.d/ips_allowed"
>
> If I add or remove IPs from this file mannualy, will the firewall be
> aware of such changes or do i need to reload pf? Also, pf do map
You need to reload. Check the man page.
> this file in memory or does it read from the disk for every packet?
Neither. The addresses are loaded in kernel memory via pfctl.
-Otto