On Thu, Apr 29, 2010 at 10:15:08AM -0300, Leonardo Carneiro - Veltrac wrote:

> Hello everyone.
> 
> I have a table in my pf.conf:
> 
> table <ips_allowed> persist const file "/etc/pf.conf.d/ips_allowed"
> 
> If I add or remove IPs from this file mannualy, will the firewall be
> aware of such changes or do i need to reload pf? Also, pf do map

You need to reload. Check the man page.

> this file in memory or does it read from the disk for every packet?

Neither. The addresses are loaded in kernel memory via pfctl.

        -Otto

Reply via email to