Proactive Firewall - PF

[Michael Dunne <mickydee@cairns.net.au>]

I would like to know if a particular Firewalling Daemon has been written.

Basicly its a daemon that listens to the pflog device and depending on 
certain rules, it automaticly adds a rule to PF to block them, such as port 
scanning.

For instance, if you run a ClassC network with a single mail server, a rule 
would be created logging access to port 25 on the ClassC except for the 
real mail server, and if there is attempted access to port 25 on anything 
other than the actual mail server, the daemon adds a block rule to packet 
filter without return-rst making a mini tarpit.

Thanks - Michael