From owner-freebsd-pf@FreeBSD.ORG Tue Dec 12 20:28:33 2006 Return-Path: X-Original-To: freebsd-pf@hub.freebsd.org Delivered-To: freebsd-pf@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id B6CDA16A417 for ; Tue, 12 Dec 2006 20:28:33 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [69.147.83.40]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7FA3643F88 for ; Tue, 12 Dec 2006 20:18:43 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id kBCKK7aq014630 for ; Tue, 12 Dec 2006 20:20:07 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id kBCKK7xQ014623; Tue, 12 Dec 2006 20:20:07 GMT (envelope-from gnats) Date: Tue, 12 Dec 2006 20:20:07 GMT Message-Id: <200612122020.kBCKK7xQ014623@freefall.freebsd.org> To: freebsd-pf@FreeBSD.org From: "Jon Simola" Cc: Subject: Re: kern/103304: pf accepts nonexistent queue in rules X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Jon Simola List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Dec 2006 20:28:33 -0000 The following reply was made to PR kern/103304; it has been noted by GNATS. From: "Jon Simola" To: bug-followup@freebsd.org Cc: Subject: Re: kern/103304: pf accepts nonexistent queue in rules Date: Tue, 12 Dec 2006 11:55:03 -0800 This is by design. Queueing, Translation, and Packet Filtering are seperate functions in PF, and they can be manipulated independantly of each other. Flushing the queueing configuration should not leave the filtering rules in an undetermined state, nor should filtering rules that reference a queue that may not have been created yet. If you are experiencing problems with queueing, it is certainly advantageous to be able to disable it entirely by "pfctl -F queue" rather than having to rewrite the entire ruleset and remove all references to queues. PF also allows rules to specify non-existant interfaces, so that hotplugging does not require reloading the ruleset.