Skip site navigation (1)Skip section navigation (2) 
Date:      Sun, 21 Dec 2014 20:29:06 +0100 (CET)
From:      krichy@tvnetwork.hu
To:        freebsd-pf@freebsd.org
Subject:   nested anchors
Message-ID:  <alpine.DEB.2.11.1412212026180.5729@krichy.tvnetwork.hu>
next in thread | raw e-mail | index | archive | help 

Dear pf devs,

I found that on FreeBSD 10.1 nested anchors does not work.

This simple config passes traffic from any to 10.2.1.0/24:

anchor from any to 10.2.1.0/24 {
   pass quick all
   block
   block log (to pflog1)
}


If the inner pass is enclosed in another anchor, then the filter drops 
packets:

anchor from any to 10.2.1.0/24 {
   anchor all {
     pass quick all
     block
   }
   block log (to pflog1)
}

That would be very nice to have this working.

Regards,

Kojedzinszky Richard
Euronet Magyarorszag Informatika Zrt.

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.DEB.2.11.1412212026180.5729>