Re: [CVS Update of freesbie2 - M:0 A:2 R:0]

Matteo Riondato wrote:
> On Sat, Jun 03, 2006 at 01:56:47PM +0200, [email protected] wrote:
>> Log Message:
>> -----------
>> Add pf plugin, which creates a basic pf.conf in a dynamic fashion, detecting
>> present ethernet devices and allowing only outside connections and incoming
>> SSH connections.
> 
> I really like the idea and it's great to see our plugins base growing,
> but I don't like the implementation.
> This plugin requires etcmfs but I don't think it should, as it's
> really simple.
> I think it can be rewritten without the dependency on etcmfs, just
> using sh, pfctl, kldstat and kldload if needed and so on.
> Comments? Am I missing something really obvious?

Well, only a writable etc it's required, so etcmfs or unionfs are ok
with it. Also xconfig plugin need it. It is not that problem.

Due to its general purpose nature, I think this implementation can be
considered fine and functional. The only thing that needs to be changed,
imho, is removing pf_enable="YES" row and using forcestart to start pf.

-- 
Dario Freni ([email protected])
FreeSBIE project is looking for a new builder machine!
Check http://www.freesbie.org/donations.html

-- 
FreeSBIE mailing list (http://www.freesbie.org)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFEgdP5ymi72IiShysRAsflAKDsD+/WB4aq7YXl2emXoDZVi6D8vQCeIsQV
CvVRX7z5UoIRIra00YX6xbA=
=rBwq
-----END PGP SIGNATURE-----