Blog of Echothrust Solutions

Hi everyone,

I just wanted to let you all know that we have released the initial code for a PFCTL extension for PHP. Although, the current version does not include lots of features, it will be good to have some feedback on this.

Let me explain what this is all about. PHP-PFCTL is an extension (needs compile) that when loaded into PHP allows you to manipulate your PF directly without the need to execute the actual /sbin/pfctl executable. For instance, if you want to create a PF table named "whatever" it is as simple as this.

<?php
pfctl_table_create("whatever");
?>


We currently use the actual pfctl source code, with very few modifications and provide a wrapper of the pfctl functions for PHP. Hopefully, this will encourage the creation of web interfaces that are much easier to code, since a lot of complexity is now removed (no need to escapeargs, no need to escape commands, no complex filtering of provided data).

Have a look at the project's web pages for more information and make sure you let us know of what you think and what would be a good idea to have implemented (sooner than later).

Links

• PHP-PFCTL Project
• benzedrine.cx - OpenBSD Packet Filter
• The PHP Extension Community Library
• PHP: Hypertext Preprocessor
• Echothrust Solutions Projects