[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
When should pf reload (if:network) rules?
Hello,
At the moment pf on OpenBSD 3.5 does a great job of automatically
reloading parenthesised interface rules when an address of that
interface changes and this works well. However I have the following
rule:
pass out quick on $int_if from any to ($int_if:network)
When pf is loaded this rule matches the interface's initial set of
network addresses. However, after pf is running an ipv6 alias is added
to the $int_if interface but despite being in parenthesis the rule is
not reloaded. I'm wondering whether (:network) should cause a rule
reload when an interface's alias list changes...
--
Sitsofe | http://sucs.org/~sits/