From owner-freebsd-net@freebsd.org  Thu Jul 26 07:58:26 2018
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7C261104614F
 for <freebsd-net@mailman.ysv.freebsd.org>;
 Thu, 26 Jul 2018 07:58:26 +0000 (UTC)
 (envelope-from patfbsd@davenulle.org)
Received: from sender-of-o52.zoho.com (sender-of-o52.zoho.com [135.84.80.217])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id E795C838F9
 for <freebsd-net@freebsd.org>; Thu, 26 Jul 2018 07:58:25 +0000 (UTC)
 (envelope-from patfbsd@davenulle.org)
Received: from mr185083 (mr185083.univ-rennes1.fr [129.20.185.83]) by
 mx.zohomail.com with SMTPS id 1532591890326582.1944053699215;
 Thu, 26 Jul 2018 00:58:10 -0700 (PDT)
Date: Thu, 26 Jul 2018 09:58:05 +0200
From: Patrick Lamaiziere <patfbsd@davenulle.org>
To: Lars Schotte <lars@gustik.eu>
Cc: freebsd-stable@freebsd.org, freebsd-net@freebsd.org
Subject: Re: PF problems with 11-stable
Message-ID: <20180726095805.28f86c64@mr185083>
In-Reply-To: <20180722155341.065c3d4d@romy.j20.helspy.pw>
References: <20180722155341.065c3d4d@romy.j20.helspy.pw>
X-Mailer: Claws Mail 3.15.1 (GTK+ 2.24.31; amd64-portbld-freebsd11.0)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-ZohoMailClient: External
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2018 07:58:26 -0000

Le Sun, 22 Jul 2018 15:53:41 +0200,
Lars Schotte <lars@gustik.eu> a =C3=A9crit :

Hello,

> Hey,
> I am on=20
> 11.2-STABLE FreeBSD 11.2-STABLE #9 r336597
> Sun Jul 22 14:08:38 CEST 2018=20
>=20
> and I see 2 problems with PF that are still there:
>  1.) set skip on lo=20
> 	does not work even though ifconfig lo matches.
> SOLVED TEMPORARILY BY: set skip on lo0

I've seen this while upgrading from 10.3 to 11.2-RELEASE. I've added
lo0 to set skip too.

When the problem occurs, lo is marked '(skip)' (pfctl -vs
Interfaces) but not lo0.

But I can't reproduce this, this happened only one time.

While I'm here, another small change is that pfctl -n does not work any
more without root credentials, I'm not sure if this is a bug or a
feature :

% pfctl -n -f /etc/pf.conf=20
pfctl: pfi_get_ifaces: Bad file descriptor

% ls -lah /etc/pf.conf=20
-rw-r--r--  1 root  wheel    97B Jul 26 09:37 /etc/pf.conf

Regards,