d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
66754ab3f1
freebsd-skq/etc
History
Max Laier 66754ab3f1 Teach periodic(8) security output to display information about blocked 
packet counts by pf(4).

This adds a ``daily_status_security_pfdenied_enable'' variable to
periodic.conf, which defaults to ``YES'' as the matching IPF(W) versions.

The output will look like this (line wrapped):

  pf denied packets:
  > block drop log on rl0 proto tcp all [ Evaluations: 504986 Packets: 0
    Bytes: 0 States: 0 ]
  > block drop log on rl0 all [ Evaluations: 18559 Packets: 427 Bytes: 140578
    States: 0 ]

Submitted by:	clive (thanks a lot!)
MFC after:	2 weeks
2004-11-24 18:41:53 +00:00
..
bluetooth Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
defaults Teach periodic(8) security output to display information about blocked 2004-11-24 18:41:53 +00:00
etc.alpha Add dumb console driver and related bits. 2003-10-24 15:44:10 +00:00
etc.amd64 Add dumb console driver and related bits. 2003-10-24 15:44:10 +00:00
etc.arm Add ttyu0 as a serial console, as we're using the uart(4) driver on arm. 2004-09-24 12:51:15 +00:00
etc.i386 Add dumb console driver and related bits. 2003-10-24 15:44:10 +00:00
etc.ia64 turn off getty(8) on ttyv[0-7]. We don't support syscons on ia64 and 2004-10-17 22:20:39 +00:00
etc.powerpc PowerPC ttys file. 2004-02-04 01:44:34 +00:00
etc.sparc64 With the fixes to getty handling of non-existent devices a default 2004-10-04 03:39:52 +00:00
isdn Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
mail Add user _pflogd. 2004-06-30 16:47:08 +00:00
mtree Create a separate directory for dynamic zones which is owned by the bind 2004-11-04 05:24:29 +00:00
namedb Create a separate directory for dynamic zones which is owned by the bind 2004-11-04 05:24:29 +00:00
pam.d For variables that are only checked with defined(), don't provide 2004-10-24 15:33:08 +00:00
periodic Teach periodic(8) security output to display information about blocked 2004-11-24 18:41:53 +00:00
ppp Catch up with PHK's sio(4) cuaa->cuad rework [sys/dev/sio/sio.c rev. 1.456]. 2004-11-19 17:12:56 +00:00
rc.d Fix a typo in an error message. 2004-11-24 10:44:39 +00:00
root - Use absolute path for hostname(1) 2004-04-01 19:28:00 +00:00
sendmail Catch up with etc/Makefile,v 1.324 -- split "install" and "distribution" 2004-01-22 17:51:02 +00:00
amd.map Time to enter modern age and default to NFS version 3. 2002-05-15 22:24:29 +00:00
apmd.conf Use separate events for resume from standby and suspend in the apm(4) 2003-12-30 17:40:28 +00:00
auth.conf auth.conf seems to be being gradually subsumed by user classes 2003-07-28 02:28:51 +00:00
crontab Clarify adjkerntz(8) note and use complete sentences in comments. 2002-11-22 16:13:39 +00:00
csh.cshrc
csh.login Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
csh.logout
devd.conf Removed the remnants of gx(4). 2004-11-08 20:24:52 +00:00
devfs.conf Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
dhclient.conf
disktab Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
fbtab
ftpusers Add user _pflogd. 2004-06-30 16:47:08 +00:00
gettytab Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
group Add "privsep" user/group _pflogd:_pflogd (64:64) to make pflogd(8) work 2004-06-23 01:32:28 +00:00
hosts Re-add information for applying for IP space from a registry since that 2003-01-28 21:29:23 +00:00
hosts.allow Use RFC 3849 address for examples. 2004-08-03 08:58:34 +00:00
hosts.equiv
hosts.lpd
inetd.conf Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
login.access Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
login.conf Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
mac.conf Add "socket" type to the list of default object types, and by 2003-11-15 02:08:01 +00:00
Makefile 1. Incorporate most of Ruslan's improvements to where and how the 2004-10-08 00:14:28 +00:00
man.alias
master.passwd UUCP's uucico(8) has not been in the base system for some time now, 2004-08-01 21:33:47 +00:00
minfree
motd s/man page/manual page/, to make the default announcement 2003-07-03 06:06:09 +00:00
netconfig Change the name for the local unix-socket based protocol 2002-12-16 22:24:26 +00:00
netstart Run /etc/rc.d/routing at the appropriate time. 2004-02-10 19:10:34 +00:00
network.subr Allow to change interfaces name on boot time. 2004-10-30 13:44:06 +00:00
networks
newsyslog.conf Style: 2004-04-03 17:52:29 +00:00
nls.alias Old-promised removing of deprecated locale names 2003-06-10 01:22:30 +00:00
nsmb.conf Bring in changes from smbfs-1.4.4. 2002-04-22 16:18:36 +00:00
opieaccess Back out previous commit now that pam_opieaccess(8) has an allow_local 2003-02-16 13:04:27 +00:00
pccard_ether Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
pf.conf Bring in some examples (and create space for future work here): 2004-09-14 01:07:19 +00:00
pf.os Update the passive OS fingerprint database from OpenBSD. 2004-09-14 00:30:14 +00:00
phones
printcap Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
profile Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
protocols Link pf to the build and install: 2004-03-08 22:03:29 +00:00
rc Remove an unused variable. 2004-10-08 14:23:49 +00:00
rc.bsdextended Give users the ability to load a mac_bsdextended(4) ruleset on boot (defaults 2004-09-29 00:12:28 +00:00
rc.firewall DNS should not necessarily be named(8), tweak the comment a bit. 2003-11-02 07:31:44 +00:00
rc.firewall6 Use RFC 3849 address for examples. 2004-08-03 08:58:34 +00:00
rc.initdiskless - Make the header conform to standard rc.d style. 2004-11-05 07:35:31 +00:00
rc.resume Fix a usage message. 2003-12-30 17:30:39 +00:00
rc.sendmail Before trying to restart/stop the MTA or MSP queue runner, make sure 2003-10-19 00:31:50 +00:00
rc.shutdown Fix a bogus variable assignment. You can't expect 2004-10-17 13:39:42 +00:00
rc.subr Add two new rc.conf options: tmpmfs_flags and varmfs_flags. 2004-11-09 10:03:17 +00:00
rc.suspend Make sure pid file creation doesn't complain if it can't create the file. 2004-01-21 03:03:40 +00:00
remote Reflect sio driver device name change cuaa -> cuad 2004-10-13 08:32:34 +00:00
rpc Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
services Add 3653/tcp and 3653/udp, since they were specifically requested. 2004-08-16 11:52:22 +00:00
shells
sysctl.conf Rework the wording of the comment for the security.bsd.see_other_uids 2003-03-13 18:43:50 +00:00
syslog.conf Make sure debug.log only gets debugging messages. 2003-04-23 13:08:31 +00:00
termcap.small Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
usbd.conf Do a better job of supporting more than one mouse device 2004-11-01 18:05:41 +00:00