py-PF is a pure-Python module for managing OpenBSD's Packet Filter. It aims to combine the flexibility of PF's C API and the power of Python, making it easier to manage PF data and to integrate firewalling capabilities in more complex applications.
Be the first to post a text review of py-PF. Rate and review a project by clicking thumbs up or thumbs down in the right column.
py-PF is a pure-Python module that allows you to manage OpenBSD's Packet Filter from Python scripts. The new release, introduces the ability to handle address tables, new classes adding more flexibility in managing addresses and a re-written PFState class in sync with OpenBSD 4.4. The other features (starting and stopping PF, retrieving the current ruleset, loading and removing rules, nesting rulesets with anchors, managing address tables, configuring Packet Filter's runtime options, retrieving the internal packet filter statistics and counters) have been largely re-written and many bugs have been fixed.
Mar 22, 2009 -- version 0.0.3 - Added the PFAddr and PFPort classes, representing addresses and ports respectively. The PFRuleAddr class is now a simple container for a PFAddr/PFPort pair. - Added table support trough the PFTable and PFTableAddr classes; the apropriate methods for managing tables have been added to the PacketFilter class. - The PFPoolAddr class has been removed: now addresses in PFPools are PFAddr instances. - Re-written the PFState class and created the PFStateKey class in accordance with the changes to PF's state handling. - Added the PFUid and PFGid classes, representing user and group IDs. Jul 06, 2008 -- version 0.0.2 - Added support for loading rulesets, by means of the PacketFilter.load_ruleset() method - Added the possibility to selectively kill states, based on address family, transport layer protocol, source and destination addresses and interface name, thanks to the PacketFilter.kill_states() method - Added the PacketFilter.set_hostid() method, which allows you to set the hostid, a numeric value used by pfsync(4) to identify which host created state table entries Apr 26, 2008 -- version 0.0.1 - Initial release
Jul 06, 2008 -- version 0.0.2 - Added support for loading rulesets, by means of the PacketFilter.load_ruleset() method - Added the possibility to selectively kill states, based on address family, transport layer protocol, source and destination addresses and interface name, thanks to the PacketFilter.kill_states() method - Added the PacketFilter.set_hostid() method, which allows you to set the hostid, a numeric value used by pfsync(4) to identify which host created state table entries Apr 26, 2008 -- version 0.0.1 - Initial release
Apr 26, 2008 -- version 0.0.1 - Initial release
This is just a pre-alpha release: lots of features are still missing and many bugs need to be fixed. Anyway, I hope that someone might find it useful and provide me with feedback and suggestions.
Be the first person to add a text review.
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?