Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Apr 2022 13:26:05 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 262590] [pf][patch] Anchor "blacklistd/*" not correctly shown in pfctl -a \* -s rules
Message-ID:  <bug-262590-227-NZx4z92KXE@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-262590-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=262590

--- Comment #11 from Matteo Riondato <matteo@FreeBSD.org> ---
(In reply to Kristof Provost from comment #10)

Hi Kristof,

Can you please tell me how you think the output of the test case I give in #5
should be printed?

In my opinion, when using "pfctl -a \* -s rules", it should be printed as
follows:

pass all flags S/SA keep state
anchor "parent" all {
  block drop in proto udp from any to any port = 23456
  anchor "child" all {
      block drop in proto icmp
  }
  block drop in proto tcp from any to any port = 34567
}
block drop in proto tcp from any to any port = 12345

You seem to think that it should not be printed like the above, and I don't
understand why, so I'd like to understand how you think it should be printed.

Right now the test case fails to print (in the sense that there are errors
emitted when recursing into the parent anchor, see #5), and I don't think it
should.

Thanks,
Matteo

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-262590-227-NZx4z92KXE>