http://www.cyberciti.biz/faq/freebsd-openbsd-reset-pf-firewall-automatically/ Every answer asks a more beautiful question. Fri, 10 Feb 2012 19:55:56 +0000 hourly 1 http://wordpress.org/?v=3.3.1 http://www.cyberciti.biz/faq/freebsd-openbsd-reset-pf-firewall-automatically/#comment-54943 Nilesh Mon, 17 Jan 2011 10:16:00 +0000 http://www.cyberciti.biz/faq/?p=3791#comment-54943 Saviour! Saviour!

]]> http://www.cyberciti.biz/faq/freebsd-openbsd-reset-pf-firewall-automatically/#comment-42194 eigenheit Tue, 23 Jun 2009 01:22:30 +0000 http://www.cyberciti.biz/faq/?p=3791#comment-42194 Thinking about it the command -nf is very useful in testing new rules, you are always kept behind your trustful gateway. Thinking about it the command -nf is very useful in testing new rules, you are always kept behind your trustful gateway.

]]> http://www.cyberciti.biz/faq/freebsd-openbsd-reset-pf-firewall-automatically/#comment-41600 gregf Wed, 13 May 2009 22:53:50 +0000 http://www.cyberciti.biz/faq/?p=3791#comment-41600 This is great, although you might already have a working rule set. In which case you wouldn't want to take down the whole firewall over a mistake. My working method has been about the same as above, but I keep new rules in there own file pf.testing. Then you can do the 120 second delay to load the original set if things went wrong. This way there is no open hole(s) in your firewall while your testing. Obviously it's highly unlikely you'll have an attack the moment you bring the firewall down. I just think it's better practice if there is a choice. This is great, although you might already have a working rule set. In which case you wouldn’t want to take down the whole firewall over a mistake. My working method has been about the same as above, but I keep new rules in there own file pf.testing. Then you can do the 120 second delay to load the original set if things went wrong. This way there is no open hole(s) in your firewall while your testing. Obviously it’s highly unlikely you’ll have an attack the moment you bring the firewall down. I just think it’s better practice if there is a choice.

]]>