NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

bin/51201: `service npf status` does nothing



>Number:         51201
>Category:       bin
>Synopsis:       `service npf status` does nothing
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    bin-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue May 31 08:40:00 +0000 2016
>Originator:     coypu
>Release:        NetBSD 7.99.29
>Organization:
>Environment:
NetBSD  7.99.29 NetBSD 7.99.29 (GENERIC) #1: Thu May 26 20:42:53 IDT 2016  fly%net.Home@localhost:/usr/obj/sys/arch/amd64/compile/GENERIC amd64
>Description:
`service npf status` does nothing.
it would be nice if it did.

for example, npfctl show is a good candidate for this.
perhaps too verbose? it is possible to only show filtering status, with changes to npfctl.

example output:
# npfctl show
# filtering:    inactive
# config:       loaded

# service npf start
Enabling NPF.
# npfctl show
# filtering:    active
# config:       loaded

map re0 dynamic any -> 10.0.0.3 pass family inet4 from 192.168.0.1/16 

group "external" on re0 
        pass stateful out final all 

group "internal" on re1 
        pass in final family inet4 from 192.168.0.1/24 
        pass out final all 

group 
        pass final on lo0 all 
        block all 

>How-To-Repeat:

>Fix:
diff --git a/etc/rc.d/npf b/etc/rc.d/npf
index f1b58e0..1197eaf 100644
--- a/etc/rc.d/npf
+++ b/etc/rc.d/npf
@@ -55,7 +55,7 @@ npf_reload()
 
 npf_status()
 {
-	:
+	/sbin/npfctl show
 }
 
 load_rc_config $name



Home | Main Index | Thread Index | Old Index