bards <bards1888@yahoo.com.au.au> wrote in message news:<6x6yc.174$EP1.9264@news.optus.net.au>...

>
> isba (for ipfilter) does *exactly* that !
>
> It allows ruleset rollback after a certain period (30 seconds or so is
> the default).

at now + 1 minute
> cp /etc/pf.good /etc/pf.conf
CTRL+D

does the same on CLI

CVS usage with this is optional.

Regards

>>>>> "Carsten" == Carsten Schmitz <google@humanprototype.com> writes:

Carsten> bards <bards1888@yahoo.com.au.au> wrote in message news:<6x6yc.174$EP1.9264@news.optus.net.au>...
>>
>> isba (for ipfilter) does *exactly* that !
>>
>> It allows ruleset rollback after a certain period (30 seconds or so is
>> the default).

Carsten> at now + 1 minute
>> cp /etc/pf.good /etc/pf.conf
Carsten> CTRL+D

You need to reload /etc/pf.conf as well.

My SOP is now:

prompt# pfctl -v -f /etc/pf.conf; sleep 30; pfctl -d

and then if I can still type, I ^C the command. Otherwise,
I wait 30 seconds, and my system is in wide-open mode, so I can get
back in and back out the damage.

--
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<merlyn@stonehenge.com> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!