Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Nov 2014 23:12:52 +0000
From:      David DeSimone <ddesimone@verio.net>
To:        Dave Horsfall <dave@horsfall.org>
Cc:        FreeBSD PF List <freebsd-pf@freebsd.org>
Subject:   RE: Getting tables to work in PF
Message-ID:  <d33209aa2c2e4580928c695d4618d404@BLUPR0801MB674.namprd08.prod.outlook.com>
In-Reply-To: <alpine.BSF.2.00.1411040921240.1220@aneurin.horsfall.org>
References:  <alpine.BSF.2.00.1411031433070.1220@aneurin.horsfall.org> <CAPBZQG2b7=iiGLsj-vtuiaWRUJ-Gk6n9JwCXxVjCMeVEqsuing@mail.gmail.com> <alpine.BSF.2.00.1411032002560.1220@aneurin.horsfall.org> <CAPBZQG2DKNGSGRNu8%2BMAdEtyH5vj85dpxRUY2kMwDOZ44f7PJA@mail.gmail.com> <alpine.BSF.2.00.1411032123560.1220@aneurin.horsfall.org> <BD387CA3-84BE-4BA1-8943-BD77539D8E08@lafn.org> <alpine.BSF.2.00.1411040921240.1220@aneurin.horsfall.org>

next in thread | previous in thread | raw e-mail | index | archive | help
The message " pfctl: DIOCSETSTATUSIF" indicates that pfctl is bombing out b=
efore it actually loads the rules into the kernel.  It's a rather unhelpful=
 message, since it does not point out the source of the problem, though.

A little web searching turned up that most likely your pf.conf references a=
 nonexistent interface name.  Looking through your pf.conf, either your "fx=
p0" interface doesn't exist, or more likely it's this line:

    set skip on lo

I'm pretty sure the loopback name should be "lo0" instead of just "lo".


-----Original Message-----
From: owner-freebsd-pf@freebsd.org [mailto:owner-freebsd-pf@freebsd.org] On=
 Behalf Of Dave Horsfall
Sent: Monday, November 03, 2014 4:31 PM
To: FreeBSD PF List
Subject: Re: Getting tables to work in PF

On Mon, 3 Nov 2014, Doug Hardie wrote:

> What happens when you run:  pfctl -f /etc/pf.conf

aneurin# pfctl -f /etc/pf.conf
No ALTQ support in kernel
ALTQ related functions disabled
pfctl: DIOCSETSTATUSIF

> I suspect you have something in /etc/rc.conf giving a different file for
> the default pf config file.  Your pf.conf file has a bunch of rules,
> none of which are shown in the pfctl output.

That's what I thought, but:

a) it flags syntax errors.

b) it's reading the /etc/spammers file.

--
Dave Horsfall (VK2KFU)  "Bliss is a MacBook with a FreeBSD server."
http://www.horsfall.org/spam.html (and check the home page whilst you're th=
ere)
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
This email message is intended for the use of the person to whom it has bee=
n sent, and may contain information that is confidential or legally protect=
ed. If you are not the intended recipient or have received this message in =
error, you are not authorized to copy, distribute, or otherwise use this me=
ssage or its attachments. Please notify the sender immediately by return e-=
mail and permanently delete this message and any attachments. Verio Inc. ma=
kes no warranty that this email is error or virus free. Thank you.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d33209aa2c2e4580928c695d4618d404>