> On 23 Jan 2023, at 05:42, Hrvoje Popovski <hrv...@srce.hr> wrote:
>
> On 22.1.2023. 12:45, David Gwynne wrote:
>>> hostname.veb1
>> description "LAN"
>>
>>> link1
>> you don't want to enable link1 unless you want pf to filter traffic on
>> the veb ports, and then you have to be careful to avoid having pf see
>> the packet again on the vport1 interface.
>>
>
> ah, yes, yes thank you ...
> is because of that, that on tpmr(4) pf is enabled by default and on
> veb(4) isn't?
yes. tpmr takes the ports and their packets away from the IP stack completely,
so there's no chance of confusion inside pf. veb assumes you're going to plug
in with vport, so defaults to avoiding confusing pf.
