OpenBSD hardening


Firewall - PF (6/6)   Monitoraggio:

               # pfctl -e                              enable
               # pfctl -d                              disable
               # pfctl -f /etc/pf.conf                 loads the pf.conf file
               # pfctl -nf /etc/pf.conf                parse the file, but don't load it
               # pfctl -Nf /etc/pf.conf                load only the NAT rules from the file
               # pfctl -Rf /etc/pf.conf                load only the filter rules from the file
               # pfctl -sn                             show the current NAT rules 
               # pfctl -sr                             show the current filter rules
               # pfctl -ss                             show the current state table
               # pfctl -si                             show filter stats and counters
               # pfctl -sa                             show EVERYTHING it can show
               # tcpdump -n -e -ttt -r /var/log/pflog  read log file
               # tcpdump -n -e -ttt -i pflog0          read log in real time

pfstat

pftop