[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

When should pf reload (if:network) rules?



Hello,

At the moment pf on OpenBSD 3.5 does a great job of automatically
reloading parenthesised interface rules when an address of that
interface changes and this works well. However I have the following
rule:

pass out quick on $int_if from any to ($int_if:network)

When pf is loaded this rule matches the interface's initial set of
network addresses. However, after pf is running an ipv6 alias is added
to the $int_if interface but despite being in parenthesis the rule is
not reloaded. I'm wondering whether (:network) should cause a rule
reload when an interface's alias list changes...

-- 
Sitsofe | http://sucs.org/~sits/