Re: npf again: L2 filtering completely broken?

[Emmanuel Nyarko <joe%eloisystems.com@localhost>]

Hi Timo,

> On Nov 6, 2026, at 3:57 PM, Timo Buhrmester <timo%math.uni-bonn.de@localhost> wrote:
> 
> I'm in the process of migrating from ipfilter to npf and I have
> noticed that the layer 2 filtering...doesn't seem to filter, and
> the reason for that is what looks like a fairly obvious bug.
> 
> However I'm also a little sick so there's a chance I'm being stupid.
> 
> Anyway, digging into the problem led me to sys/net/npf/npf_os.c's
> get_etherpfil_head, which loops over all interfaces to register
> the L2 hooks:
> 
> | IFNET_WRITER_FOREACH(ifp) {
> |         error = register_etherpfil_hook(npf, ifp, i);
> |         if (!error)
> |                 break;
> |         i++;

Thank you for catching this. I wil make the change as soon as possible and needs to be pulled up. 

I will need to get more stuff tested on live and on rump too.

Thanks!