Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ENHANCEMENT] Support logging in dynamic rdr rules #464

Closed
nmurali94 opened this issue Nov 30, 2021 · 2 comments
Closed

[ENHANCEMENT] Support logging in dynamic rdr rules #464

nmurali94 opened this issue Nov 30, 2021 · 2 comments
Labels
enhancement New feature or request

Comments

@nmurali94
Copy link
Contributor

nmurali94 commented Nov 30, 2021

Is your feature request related to a problem? Please describe.
I usually log connections to my jails. But I can't do this when using bastille rdr which dynamically inserts the rdr rule using pfctl.

There doesn't seem to be any support for this. I wanted to check if there was any interest in supporting this before I created a PR

Describe the solution you'd like
I'd like an extension to the current bastille rdr parameters with something like

Usage: bastille rdr TARGET [clear|list|(tcp|udp host_port jail_port [ log [ ( logopts ) ] ] ) ]

where the log keyword is optional and logopts is defined in the Grammar section of pf.conf

Describe alternatives you've considered
The only alternative I see is to basically use static rdr rules in pf.conf which isn't ideal in many cases

Additional context

@nmurali94 nmurali94 added the enhancement New feature or request label Nov 30, 2021
@cedwards
Copy link
Contributor

I like this idea but haven't had any time to implement on my own. If you can submit a PR I'll review.

@bmac2
Copy link
Collaborator

bmac2 commented Oct 20, 2023

#502 was merged. marking this one as fixed by @nmurali94 .

closing.

@bmac2 bmac2 closed this as completed Oct 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants