Re: misc/56990: npf: `ruleset` line in npf.conf does not behave as expected following a `block all` line

[BERTRAND Joël <joel.bertrand%systella.fr@localhost>]

The following reply was made to PR misc/56990; it has been noted by GNATS.

From: =?UTF-8?Q?BERTRAND_Jo=c3=abl?= <joel.bertrand%systella.fr@localhost>
To: "gnats-bugs%netbsd.org@localhost" <gnats-bugs%NetBSD.org@localhost>
Cc: 
Subject: Re: misc/56990: npf: `ruleset` line in npf.conf does not behave as
 expected following a `block all` line
Date: Fri, 25 Aug 2023 15:12:01 +0200

 	Strange.
 
 	I have tried to add log without any result.
 
 1/ I have unmounted iSCSI device (unmount and iscsictl logout)
 2/ I have modified my /etc/npf.conf file:
 
 group default {
     pass final on lo0 all
     block all apply "log"
 }
 
 3/ I have reconnected iSCSI targets (iscsctl
 add_send_target/refresh_target/login). These commands are in a script,
 thus, I have reconnected these devices with /exactly/ the same sequence
 of commands :
 
 case $1 in
 start)
     sleep 5
     ${command} add_send_target -a 192.168.12.2
     ${command} add_send_target -a 192.168.12.3
     ${command} refresh_targets
     ${command} list_targets
     ${command} login -P `iscsictl list_targets | \
         awk '/192.168.12.2/ { print $1; }' | tr -d ":"`
     ${command} login -P `iscsictl list_targets | \
         awk '/192.168.12.3/ { print $1; }' | tr -d ":"`
     sleep 1
     mount -o rw,log NAME=bacula /opt/bacula
     mount -o rw,log NAME=video /opt/video
     /etc/rc.d/mountd reload
 
 and... both devices are now connected, mounted and usable. I don't
 undestand, this morning, I have tried to connect these devices without
 success. I cannot reboot this server to test again but I will restart
 system as soon as possible to check.
 
 	I have added !brconfig $int ipf at end of ifconfig.bridge0 but both
 devices run without this line.
 
 	Regards,
 
 	JKB