#	$OpenBSD: rc.local,v 1.39 2006/07/28 20:19:46 sturm Exp $

# Site-specific startup actions, daemons, and other things which
# can be done AFTER your system goes into securemode.  For actions
# which should be done BEFORE your system has gone into securemode
# please see /etc/rc.securelevel.

echo -n 'starting local daemons:'

# Add your local startup actions here.

# suffield: jhealy: start our honeypot listener (which just listens on
#                   an unused port to tarpit portscanners)
/etc.suffield/honeypot_listen

# suffield: jhealy: create logger to watch pflog1 (PF NAT state creations)
if [ X"${pf}" != X"NO" ]; then
    if [ -f ${pf_rules} ]; then
	if grep -q pflog1 ${pf_rules}; then
	    ifconfig pflog1 create >/dev/null 2>&1
	    if ifconfig pflog1 >/dev/null 2>&1; then
		ifconfig pflog1 up
		pflogd -f /var/log/natstate.log -i pflog1 -p natstate
                echo -n " pflogd1 (natstate)"
	    fi
	fi
    fi
fi

echo '.'