On 14/05/2019 10:25, Patrick Welche wrote:
http://rmind.github.io/npf/stateful.html
group "external" on $ext_if {
block all
pass stateful in final proto tcp flags S/SA to $ext_if port ssh
}
npfctl: address family mismatch
Does $ext_if have a v4 and v6 address. I found that npf didn't like that. Mike