From owner-freebsd-questions@freebsd.org Thu Feb 27 15:07:09 2020 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 558982440B4 for ; Thu, 27 Feb 2020 15:07:09 +0000 (UTC) (envelope-from amutu@amutu.com) Received: from mail-qk1-x72d.google.com (mail-qk1-x72d.google.com [IPv6:2607:f8b0:4864:20::72d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48Swxk0dMSz4c3s for ; Thu, 27 Feb 2020 15:07:05 +0000 (UTC) (envelope-from amutu@amutu.com) Received: by mail-qk1-x72d.google.com with SMTP id f3so3435734qkh.3 for ; Thu, 27 Feb 2020 07:07:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amutu-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=5oxR/87qkdccnSQuubthLl1wweIqqGjJJ4KI9fbnAv4=; b=1fJxCChrc6AJBhuHp0rxcn1lS6motlMjtRnKcUDZbKesUH3bPdD1UGN6wGzKSoxP+n Ai7BfXeo0kN+tbiPTAHSRdWfcvmn35BVG3itIJsm1AbgBXYrfhRiHez16vt1+KkWauyx IQPhwKNF4ZjSXrMcVz080VDMZWP7ZPStIjYsCOeVm7R1Tls0lmuTTmb2BS1gVIvrbuBp 7tvqaOMxI20ot99MRHR3QzGQUxj5n/S7NgZIivVpnZY91mQuPFVZeq9HGaRGXWBp+rtC 7L3w1WooHgKG1C38ZJpv20VgloLrlAs5r7wRR36XkQBcHsCXdp7oYnp9kcTbXuCCm4MD XgLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=5oxR/87qkdccnSQuubthLl1wweIqqGjJJ4KI9fbnAv4=; b=WYZxeIiXtQ+vekS9HM0thX63wjns1Upkdy/YJDqqlIT5wOTxqgbp4+gCR5lZAc3877 yPQA3tHbopF5HDrzA0UjgdY3hQ7QwYw/f8EkRt2ZcyxQA0pNne8RuI2iWAoYdDazk1gh 0ysfKf053tL5ohvmOF44ogoCuKvCkQhx1whJF+dtsvKwtyH6pXYI5Kr4VO/9JpaGfzZH V1FHoxsUKcSmXp9gmBjhRP9AvfsAlsy8Ta/EUuIerVqkmQuOJp3fbF9GXyAudY2EdZp4 koipo4iQDwaW3er50UdP1HjSowO432fiAEVQ2QgOLT/UQkkagJe0VH4zeZC1ERcfK6zR kWjA== X-Gm-Message-State: APjAAAV3u3LYep5U5gE23/SlkXFHO8MHqu6WWJ6kE4DRHrSo/7vAIwYf 4lJ1iStN4FsGv8743ojAXgFVm5s+2NQ= X-Google-Smtp-Source: APXvYqxr6dmaRRjGVPGn+XLjqyh4RH46pxsqCeTN/77IxC+qro/FgMWGSzr9MdzO0+OZb2OsmVRAzA== X-Received: by 2002:a05:620a:222d:: with SMTP id n13mr6678443qkh.268.1582816022745; Thu, 27 Feb 2020 07:07:02 -0800 (PST) Received: from mail-qk1-f174.google.com (mail-qk1-f174.google.com. [209.85.222.174]) by smtp.gmail.com with ESMTPSA id x44sm1615426qtc.88.2020.02.27.07.07.00 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 27 Feb 2020 07:07:01 -0800 (PST) Received: by mail-qk1-f174.google.com with SMTP id m9so3423574qke.4 for ; Thu, 27 Feb 2020 07:07:00 -0800 (PST) X-Received: by 2002:a05:620a:c11:: with SMTP id l17mr6117048qki.53.1582816020480; Thu, 27 Feb 2020 07:07:00 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Jov Date: Thu, 27 Feb 2020 23:06:48 +0800 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: pfctl Recursive in anchor broken(DIOCGETRULES: Invalid argument)? To: Kristof Provost Cc: FreeBSD Mailing List X-Rspamd-Queue-Id: 48Swxk0dMSz4c3s X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=amutu-com.20150623.gappssmtp.com header.s=20150623 header.b=1fJxCChr; dmarc=fail reason="No valid SPF, DKIM not aligned (relaxed)" header.from=amutu.com (policy=none); spf=softfail (mx1.freebsd.org: 2607:f8b0:4864:20::72d is neither permitted nor denied by domain of amutu@amutu.com) smtp.mailfrom=amutu@amutu.com X-Spamd-Result: default: False [-3.77 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[amutu-com.20150623.gappssmtp.com:s=20150623]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; R_SPF_SOFTFAIL(0.00)[~all]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[amutu-com.20150623.gappssmtp.com:+]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[d.2.7.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; IP_SCORE(-2.57)[ip: (-9.24), ipnet: 2607:f8b0::/32(-1.88), asn: 15169(-1.67), country: US(-0.05)]; FROM_EQ_ENVFROM(0.00)[]; SUBJECT_ENDS_QUESTION(1.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_TLS_ALL(0.00)[]; DMARC_POLICY_SOFTFAIL(0.10)[amutu.com : No valid SPF, DKIM not aligned (relaxed), none] Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Feb 2020 15:07:09 -0000 uname -a FreeBSD 11.2-RELEASE FreeBSD 11.2-RELEASE #0 r335510: Fri Jun 22 04:32:14 UTC 2018 root@releng2.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64 I know that 11.2-R is EOL and I have run freebsd-update to upgrade to 12.1=EF=BC=8Cbut have not reboot,so the new kernel is not take effect. freebsd-version -ku 12.1-RELEASE-p1 11.2-RELEASE-p2 Kristof Provost =E4=BA=8E2020=E5=B9=B42=E6=9C=8827=E6= =97=A5=E5=91=A8=E5=9B=9B =E4=B8=8B=E5=8D=8810:56=E5=86=99=E9=81=93=EF=BC=9A > On 26 Feb 2020, at 15:23, Jov wrote: > > hi hackers, > > I use fail2ban today and find pfctl recursive anchor do not work, it > report > > nothing(pfctl -a 'f2b/*' -sr) or get all main rule and a warning(pfctl = -a > > '*' -sr,get DIOCGETRULES: Invalid argument). > > What version of FreeBSD are you running? > > Regards, > Kristof >