Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Dec 2004 12:14:54 +0100
From:      Max Laier <max@love2party.net>
To:        freebsd-pf@freebsd.org
Cc:        sam wun <sam.wun@authtec.com>
Subject:   Re: pfctl -t private_ips -vTshow
Message-ID:  <200412161215.02476.max@love2party.net>
In-Reply-To: <41C141D4.9030303@authtec.com>
References:  <41C141D4.9030303@authtec.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart1682355.8grx1pTHo5
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Thursday 16 December 2004 09:05, sam wun wrote:
> Hi
>
> The following pfctl command returns error
>
> # pfctl -t private_ips -vTshow
> pfctl: Table does not exist.
>
> The table optin is defined in he pf.conf as shown below:
> table <private_ips> { 10.0.0.0/8, !10.1.0.0/16, 192.168.0.0/24,
> 192.168.1.18 }
>
> Have I used incorrect syntax?

=46rom pf.conf(5):
|     persist  The persist flag forces the kernel to keep the table even wh=
en
|              no rules refer to it.  If the flag is not set, the kernel wi=
ll
|              automatically remove the table when the last rule referring =
to
|              it is flushed.

i.e. if you don't have a rule using the table pf will trow it away unless y=
ou=20
define the table as persist(ent) as in:

table <private_ips> persistent { ... }

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart1682355.8grx1pTHo5
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQBBwW42XyyEoT62BG0RAuDdAJ9LHqQH5KUcOnP5IT+2ij6G4L/Q1gCdFNOD
jCWaCUVWC9eJ9KjEiQEyZ5M=
=Hi2K
-----END PGP SIGNATURE-----

--nextPart1682355.8grx1pTHo5--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200412161215.02476.max>