Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Apr 2021 16:48:16 +0200
From:      =?utf-8?Q?Peter_Ankerst=C3=A5l?= <peter@pean.org>
To:        "stable@freebsd.org" <stable@FreeBSD.org>
Subject:   Re: using interface groups in pf tables stopped working in 13.0-RELEASE
Message-ID:  <6FB0F920-DB5D-4216-9879-1998981F5E27@pean.org>
In-Reply-To: <431C3D85-C754-4E1C-94E0-333DE254F0AC@pean.org>

index | next in thread | previous in thread | raw e-mail




> On 14 Apr 2021, at 16:16, Peter Ankerstål <peter@pean.org> wrote:
> 
> In pf I use the interface group syntax alot to make the configuration more readable. All interfaces are assigned to a group representing its use/vlan name. 

It seems that the rest of my ruleset is also affected by this, and interface groups combined with :network no longer work.

For example I have this anchor:
    anchor in from trusted:network {
    }

which before resolved to 
    anchor in inet from 172.25.0.0/24 to any {
    }

but now resolves to:
    anchor in inet6 all {
    }

/Peter.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6FB0F920-DB5D-4216-9879-1998981F5E27>