tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Connection closed when npf restarting with rules in non-default group



Frédéric Fauberteau writes:
    group default {
      # [...]
      # SSH
pass stateful in final family inet4 proto tcp to $ext_ip4 port ssh pass stateful in final family inet6 proto tcp to $ext_ip6 port ssh
      # [...]
    }

Actually, 'service npf restart' closes connection if "on" interface is added to the rule:

pass stateful in final on $ext_if family inet4 proto tcp to $ext_ip4 port ssh pass stateful in final on $ext_if family inet6 proto tcp to $ext_ip6 port ssh

Is it a bug or a feature?


Home | Main Index | Thread Index | Old Index