Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Apr 2021 16:48:16 +0200
From:      =?utf-8?Q?Peter_Ankerst=C3=A5l?= <peter@pean.org>
To:        "stable@freebsd.org" <stable@FreeBSD.org>
Subject:   Re: using interface groups in pf tables stopped working in 13.0-RELEASE
Message-ID:  <6FB0F920-DB5D-4216-9879-1998981F5E27@pean.org>
In-Reply-To: <431C3D85-C754-4E1C-94E0-333DE254F0AC@pean.org>
References:  <431C3D85-C754-4E1C-94E0-333DE254F0AC@pean.org>

next in thread | previous in thread | raw e-mail | index | archive | help



> On 14 Apr 2021, at 16:16, Peter Ankerst=C3=A5l <peter@pean.org> wrote:
>=20
> In pf I use the interface group syntax alot to make the configuration =
more readable. All interfaces are assigned to a group representing its =
use/vlan name.=20

It seems that the rest of my ruleset is also affected by this, and =
interface groups combined with :network no longer work.

For example I have this anchor:
    anchor in from trusted:network {
    }

which before resolved to=20
    anchor in inet from 172.25.0.0/24 to any {
    }

but now resolves to:
    anchor in inet6 all {
    }

/Peter.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6FB0F920-DB5D-4216-9879-1998981F5E27>