Re: Layer-2 filtering in NPF

[Emmanuel Nyarko <emmankoko519%gmail.com@localhost>]

> On 8 Jul 2025, at 11:51 AM, Greg Troxel <gdt%lexort.com@localhost> wrote:
> 
> I am also seeing serious problems, but I haven't quite figured them out.
> 
> Sorry this is vague but better to be vague now and clearer later than wait.
> 
> First, the presence of a map line for an interface that doesn't exist
> used to be fine, and now it seems to break parsing with a strange error.
> 
> Second, with a group default and no layer-2 rules (and the config that
> used to work fine), I'm also seeing that traffic is blocked enough that
> things go badly.

This is very interesting. so much works on my netbsd and that’s what i use for internet connectivity right now and everything works fine on mine.

all tests in rump also pass. this is weird. 

Maybe i should take them out for now and rework them to fix all hidden bugs.

Emmanuel