Re: Removing PF

[Mindaugas Rasiukevicius <rmind%netbsd.org@localhost>]

"John D. Baker" <jdbaker%consolidated.net@localhost> wrote:
> > 
> > ifaddrs(netifN) represents a list of addresses currently assigned the
> > interface i.e. it works dynamically, you do not need to `npfctl reload`.
> 
> So, to be clear, if an interfaces gains/sheds addresses, ifaddrs(netifN)
> will always reflect the current set of addresses on that interface
> each time ifaddrs(netifN) is used, correct?

Correct.

> <...>
> 
> So, I suppose the issue is that although the interface will have
> multiple addresses, I wish to treat each address independenly, but
> need to do so symbolically as (at least one of) the exact addresses
> cannot be known ahead of time or guaranteed to be current.
> 

Would it help if you could apply a filter to the dynamic address list,
e.g. ifaddrs(netif0, 10.0.0.0/8) or ifaddrs(netif0, ! 10.0.0.0/8)?  The
latter would include all addresses which are not in the 10/8 network.

-- 
Mindaugas