diff options
Diffstat (limited to 'statuspage')
| -rwxr-xr-x | statuspage/checks/pf.sh | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/statuspage/checks/pf.sh b/statuspage/checks/pf.sh index 651b638..d1f22d1 100755 --- a/statuspage/checks/pf.sh +++ b/statuspage/checks/pf.sh @@ -21,6 +21,13 @@ DIR=$(dirname "$0") # shipped. A rule shape this doesn't recognize just passes through # unshortened - still correct, just longer. # +# Applied to both -sr (filter) and -sn (nat/rdr) output, but every regex +# here was written and tested against filter-rule syntax only. NAT/rdr +# shapes (e.g. `rdr on ... -> ...`) haven't been exercised against a real +# ruleset - they'll degrade safely to unshortened text if a pattern +# doesn't match, but don't assume a new nat/rdr rule will compress as +# tightly as a filter rule without checking the rendered page. +# # State-tracking mode is tagged with a single bracketed letter rather # than a symbol, since the four modes (no/keep/modulate/synproxy) have # meaningfully different security properties and a bracket+letter reads |