Date: Thu, 16 Dec 2004 12:14:54 +0100 From: Max Laier <max@love2party.net> To: freebsd-pf@freebsd.org Cc: sam wun <sam.wun@authtec.com> Subject: Re: pfctl -t private_ips -vTshow Message-ID: <200412161215.02476.max@love2party.net> In-Reply-To: <41C141D4.9030303@authtec.com> References: <41C141D4.9030303@authtec.com>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --]
On Thursday 16 December 2004 09:05, sam wun wrote:
> Hi
>
> The following pfctl command returns error
>
> # pfctl -t private_ips -vTshow
> pfctl: Table does not exist.
>
> The table optin is defined in he pf.conf as shown below:
> table <private_ips> { 10.0.0.0/8, !10.1.0.0/16, 192.168.0.0/24,
> 192.168.1.18 }
>
> Have I used incorrect syntax?
From pf.conf(5):
| persist The persist flag forces the kernel to keep the table even when
| no rules refer to it. If the flag is not set, the kernel will
| automatically remove the table when the last rule referring to
| it is flushed.
i.e. if you don't have a rule using the table pf will trow it away unless you
define the table as persist(ent) as in:
table <private_ips> persistent { ... }
--
/"\ Best regards, | mlaier@freebsd.org
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | mlaier@EFnet
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)
iD8DBQBBwW42XyyEoT62BG0RAuDdAJ9LHqQH5KUcOnP5IT+2ij6G4L/Q1gCdFNOD
jCWaCUVWC9eJ9KjEiQEyZ5M=
=Hi2K
-----END PGP SIGNATURE-----
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200412161215.02476.max>