tech-net archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
What is wrong with pf in 5.0?
Hi,
I upgraded my router to 5.0.0_PATCH and somehow pf is borked.
Rules such as
pass in quick on $ext6_if inet6 from any to { $ext6_if_local, $ext6_net }
pass out quick on $ext6_if inet6 from { $ext6_if_local, $ext6_net } to any
get expanded to
pass in quick on gif0 inet6 from any to [...] flags S/SA keep state (if-bound)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
pass in quick on gif0 inet6 from any to [...] flags S/SA keep state (if-bound)
pass out quick on gif0 inet6 from [...] to any flags S/SA keep state (if-bound)
pass out quick on gif0 inet6 from [...] to any flags S/SA keep state (if-bound)
What the hell? Why does it apply TCP flags and state keeping when I didn't
request that anywhere?
Regards
--
Of course it runs NetBSD.
Home |
Main Index |
Thread Index |
Old Index