Re: Layer-2 filtering in NPF

[Greg Troxel <gdt%lexort.com@localhost>]

I am also seeing serious problems, but I haven't quite figured them out.

Sorry this is vague but better to be vague now and clearer later than wait.

First, the presence of a map line for an interface that doesn't exist
used to be fine, and now it seems to break parsing with a strange error.

Second, with a group default and no layer-2 rules (and the config that
used to work fine), I'm also seeing that traffic is blocked enough that
things go badly.