From owner-freebsd-stable@freebsd.org Tue Apr 27 09:47:53 2021 Return-Path: Delivered-To: freebsd-stable@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id EBCEA627B66 for ; Tue, 27 Apr 2021 09:47:53 +0000 (UTC) (envelope-from peter@pean.org) Received: from mailman.nyi.freebsd.org (mailman.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:13]) by mx1.freebsd.org (Postfix) with ESMTP id 4FTxlF5kGPz3knb for ; Tue, 27 Apr 2021 09:47:53 +0000 (UTC) (envelope-from peter@pean.org) Received: by mailman.nyi.freebsd.org (Postfix) id C29A7627DB8; Tue, 27 Apr 2021 09:47:53 +0000 (UTC) Delivered-To: stable@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C2617627D28 for ; Tue, 27 Apr 2021 09:47:53 +0000 (UTC) (envelope-from peter@pean.org) Received: from system.jails.se (system.jails.se [52.16.239.146]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4FTxlF3MTqz3kxX; Tue, 27 Apr 2021 09:47:53 +0000 (UTC) (envelope-from peter@pean.org) Received: from [100.126.227.150] (unknown [94.234.35.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by system.jails.se (Postfix) with ESMTPSA id F120A32E61A; Tue, 27 Apr 2021 11:47:51 +0200 (CEST) Content-Type: multipart/signed; boundary=Apple-Mail-EB105160-0AA7-4C04-B5B0-6B84CC44E472; protocol="application/pkcs7-signature"; micalg=sha-256 Content-Transfer-Encoding: 7bit From: =?utf-8?Q?Peter_Ankerst=C3=A5l?= Mime-Version: 1.0 (1.0) Subject: Re: using interface groups in pf tables stopped working in 13.0-RELEASE Date: Tue, 27 Apr 2021 11:47:50 +0200 Message-Id: <324453B6-76FC-44CF-8B03-3A12184CF8CA@pean.org> References: <75C439F6-E778-47AE-8BD9-20FEDE129EB7@FreeBSD.org> Cc: stable@freebsd.org In-Reply-To: <75C439F6-E778-47AE-8BD9-20FEDE129EB7@FreeBSD.org> To: Kristof Provost X-Mailer: iPhone Mail (18D52) X-Rspamd-Queue-Id: 4FTxlF3MTqz3kxX X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[] X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Apr 2021 09:47:54 -0000 --Apple-Mail-EB105160-0AA7-4C04-B5B0-6B84CC44E472 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable >>>=20 >> I can=20 >> It looks like there=E2=80=99s some confusion inside pfctl about the netwo= rk group. It ends up in pfctl_parser.c, append_addr_host(), and expects an A= F_INET or AF_INET6, but instead gets an AF_LINK. >>=20 >> It=E2=80=99s probably related to 250994 or possibly d2568b024da283bd2b88a= 633eecfc9abf240b3d8. >> Either way it=E2=80=99s pretty deep in a part of the pfctl code I don=E2=80= =99t much like. I=E2=80=99ll try to poke at it some more over the weekend. >>=20 > It should be fixed as of d5b08e13dd6beb3436e181ff1f3e034cc8186584 in main.= I=E2=80=99ll MFC that in about a week, and then it=E2=80=99ll turn up in 13= .1 in the fullness of time. Nice thanks.=20 I also seem to have problem even in anchors (not while using tables). But ma= ybe this will also be fixed by this change. --Apple-Mail-EB105160-0AA7-4C04-B5B0-6B84CC44E472 Content-Type: application/pkcs7-signature; name=smime.p7s Content-Disposition: attachment; filename=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCBlAw ggZMMIIFNKADAgECAhAIYx54g0aQ2jlpvYBCpK60MA0GCSqGSIb3DQEBCwUAMGUxCzAJBgNVBAYT AlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAi BgNVBAMTG0RpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDQTAeFw0xOTAzMjAwMDAwMDBaFw0yMjAz MjAxMjAwMDBaMHQxCzAJBgNVBAYTAlNFMRAwDgYDVQQHEwdVcHBzYWxhMRkwFwYDVQQKDBBQZXRl ciBBbmtlcnN0w6VsMRkwFwYDVQQDDBBQZXRlciBBbmtlcnN0w6VsMR0wGwYJKoZIhvcNAQkBFg5w ZXRlckBwZWFuLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANbMh3R37S2b/qQU LkhUSZvHgrl9zRt2ARiVkAhOEQxdOax6XCm6LbNNSSk3uduA+kKhLKf442IUff0RfNJfm/6SEDm0 sR7jWLR4duWmo2f5fWl9/E6ALvWVqJY5ILR9fz7xoB1YjM4OXyNXPYYHZh/rTYek6XL2Ku7Ph2iD mhvYlmHO28MKUA0DvHrFSdLV5/K/gVIMS8c0rlPNi5fWU8WG9NTaNvdXYKPomb2pfo5d9DXFLZs2 F0aPCielmvcWnt1CaVrhdk8vs+/gIra1ZHkha3pYAGkXq+n/3teZNh8gX7ltVJpPWs2IYtRTd0j1 YjqWBK9kgilL6CBQs5q76Mcjm0A3iCTOUFHmmkLMBJcKiobpcOAcWBS3Wf7jgbkZAuoWnbJPg+DA COzna8lg/S1+FlMGxOZsosrcoagzxMIYddfTC/lMFX+lXifW30cudPjWx5fM0QoDKGILPa85K1ex BsiaHx1danwitEMux6RlTuHKAJg7CkiMc9aP5P0aGbHTpJTYh8uHdL83sgnekwJ5Dgkh7BNqVhED 0cjDfAsNHOdhTTHdEprqrJ9ytkHmWFvUhiX9hkW0LFgFc5apbB/mwsUstfPHfDOflLidbtcG4Xgw 8fKv/it0xlJwPhxhHHZkndwrkjsoz/jbyFrlbPBBkA1dwamhtppwcZsWiqlJAgMBAAGjggHnMIIB 4zAfBgNVHSMEGDAWgBTnAiOAAE/Y17yUC9k/dDlJMjyKeTAdBgNVHQ4EFgQUxx/6f5aEHV7C1Tuz e+XbwXnlIOkwDAYDVR0TAQH/BAIwADAZBgNVHREEEjAQgQ5wZXRlckBwZWFuLm9yZzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMEMGA1UdIAQ8MDowOAYKYIZI AYb9bAQBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGIBgNV HR8EgYAwfjA9oDugOYY3aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFzc3Vy ZWRJRENBLWcyLmNybDA9oDugOYY3aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hB MkFzc3VyZWRJRENBLWcyLmNybDB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t L0RpZ2lDZXJ0U0hBMkFzc3VyZWRJRENBLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAtH6RpZidx4wf eniyd1+ZDD5lSQXq2OVV8mwMnYFJpYSlnyorSJR4zWCtnjcLDNvZGIWizSk29F3CGUJ9sW774Lvm xk8Yr64ntT9phUozFtSiBPxpjXTdXIIRcSu8Fjh+FWaoMw2z7ONCZX0wT5QnqV9YdrMg/+wzdo6n rgJfafUI6qXSImKlGJ1Xnzka/QS+pxcyUtsFLw0O9bnLaOBCUtmKItTv9FT/fBJenhdm4k4uMFgh w5kWF4dZsof0HOkQeC+DfsFJbIJ5wheT/uZhuF/Fz8mTJ0qNl8V4+fm1nSWYWJtygb/FENpK0HVa ffwSJp3f02pu/cHNKOwc62w4uTGCBCkwggQlAgEBMHkwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoT DERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNl cnQgU0hBMiBBc3N1cmVkIElEIENBAhAIYx54g0aQ2jlpvYBCpK60MA0GCWCGSAFlAwQCAQUAoIIB gTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTA0MjcwOTQ3NTBa MC8GCSqGSIb3DQEJBDEiBCB/mX7HN4wfXrnagV6noZM+8R5GYLCjb26LK20gj9ms9zCBiAYJKwYB BAGCNxAEMXsweTBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQL ExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBTSEEyIEFzc3VyZWQgSUQgQ0EC EAhjHniDRpDaOWm9gEKkrrQwgYoGCyqGSIb3DQEJEAILMXugeTBlMQswCQYDVQQGEwJVUzEVMBMG A1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtE aWdpQ2VydCBTSEEyIEFzc3VyZWQgSUQgQ0ECEAhjHniDRpDaOWm9gEKkrrQwDQYJKoZIhvcNAQEL BQAEggIAPr02qwj2gK6QIlJricWdYp9k7N+nIiPc8Fi16CrVLZTk6yQejxYrac4SiIQws68V/2A5 xqIn6X8E6a1XTdOAHg/jyxgJqVd37BR6ki5Eg2qaAsubYvo5Z3GuD7bczTRV9U645S3oOw5alFrb 8vz/EOoDN/Hf5nWxkp6ozVMloWqh/VqJ9LXrioYOV0GMDEivKrhEvNmAEOxuEAGkAKOutLWzu8YR 2QKgmbs57YFYDJr+/pdPO4IKmV2xbplqT696YpFhtHZQp5lcFEXt/n0J/pPB1POxfk40RuZUk41J bJy/SPxadyrkVA7UM67aOy+4KJ1ir5U6fVvoG4dvZEx16MPwvhFuYNEtLlcWKnjoZbkcsOaU1w13 VqoTfwYj5NV9zqaRE31Xy/CXpVFXNYvhNJRZ2C2bHWCYEr2OuOsF71Bve/fBIOOGJ5A9MajfSRQt KlRPanb6QEpAOSKLa0QCsSbvb+t48D/BsOLjjN/WvIsjmc0oAGIY2Z5T1mEVIDtU1MxXmE3l3DeN oRd++DtH0qYAvqh65VojbGVyGqCwBytVwPJ4FzguQajfOLyhSBjRVlVpkm8cLENsn08nVOYH63eh 0JaGkDGZxfisP96NHUBaIMuVtXNjEF7dJzLbMT3Y0vIWB/Ncx3ojKCZPylH7U7FbgcA4W5eeJxPo /rHSIGMAAAAAAAA= --Apple-Mail-EB105160-0AA7-4C04-B5B0-6B84CC44E472--