[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Bug in pf - 3.6 ?



Hello,

  I have problem with pf - anchors in OBSD 3.6. I have this pf.conf:
---------------------------------------------------------------------
net_krcka       =       "10.7.184.2"
net_malek       =       "10.7.185.2"

scrub in all

altq on rl0 bandwidth 100Mb cbq queue { dflt_rl0, krcka_fast, krcka_slow, malek_fast, malek_slow }

queue dflt_rl0          bandwidth 2128Kb cbq(default)
queue krcka_fast        bandwidth 1Mb   priority 1
queue krcka_slow        bandwidth 64Kb  priority 1
queue malek_fast        bandwidth 1Mb   priority 1
queue malek_slow        bandwidth 64Kb  priority 1

altq on tl0 bandwidth 100Mb cbq queue { dflt_tl0, krcka_fast_up, krcka_slow_up, malek_fast_up, malek_slow_up }

queue dflt_tl0             bandwidth 2128Kb cbq(default)
queue krcka_fast_up        bandwidth 256Kb priority 1
queue krcka_slow_up        bandwidth 64Kb  priority 1
queue malek_fast_up        bandwidth 256Kb priority 1
queue malek_slow_up        bandwidth 64Kb  priority 1

pass in all
pass out all

anchor krcka        out on rl0  from any            to $net_krcka
anchor krcka_up     out on tl0  from $net_krcka     to any

anchor malek        out on rl0  from any            to $net_malek
anchor malek_up     out on tl0  from $net_malek     to any  
---------------------------------------------------------------------

an following file for anchor.

net = "10.7.184.2"
pass out from any to $net queue krcka_slow

---------------------------------------------------------------------
Now I use command
/sbin/pfctl -a krcka:allow -f /usr/local/etc/rules/krcka
---------------------------------------------------------------------

If I use
pfctl -s all -vv | less
on obsd 3.4 or 3.5, I see traffic for anchor krcka, but in 3.6 no.
Where is problem - is it bug or my mistake?

Thanks
Radek

-- 
Regards,
 Bc. Radek Krejca
 radek_(_at_)_ceskedomeny_(_dot_)_cz
 http://www.ceskedomeny.cz
 http://www.skdomeny.com
 http://www.starnet.cz



Visit your host, monkey.org