Re: pf tables locking

2018-08-13 Thread Kajetan Staszkiewicz
On Monday, 13 August 2018 17:59:15 CEST Kristof Provost wrote: > pf keeps rules around until there are no more states left referencing the > rule. Look at pf_commit_rules(): The old rules are unlinked rather than > removed. They’re kept on the V_pf_unlinked rules list. Every so often pf > runs thr

Re: pf tables locking

2018-08-13 Thread Kristof Provost
On 13 Aug 2018, at 17:06, Kajetan Staszkiewicz wrote: > On Monday, 13 August 2018 15:22:33 CEST Kristof Provost wrote: >> rules (and associated tables) won’t just go away while there’s still >> state, > > This is mostly what I wanted to ask about in this message. How is it ensured > that table and

Re: pf tables locking

2018-08-13 Thread Kajetan Staszkiewicz
On Monday, 13 August 2018 15:22:33 CEST Kristof Provost wrote: > > I'm going through the code and I've found out that many table-related > > function > > are guarded by lock on pf ruleset. But that is not true for > > pfr_update_stats. > > This function is called from pf_test only after PF_RULES_R

Re: pf tables locking

2018-08-13 Thread Kristof Provost
On 13 Aug 2018, at 0:09, Kajetan Staszkiewicz wrote: Hello group, Can anybody help me iwth pf_table.c and all operations on tables, especially pfr_update_stats? I'm working on implementing stats for redirection targets, that is for nat or route-to. I'm going through the code and I've found o

[Bug 229241] pfctl -f /etc/pf.conf blocks loopback interface

2018-08-13 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229241 Kristof Provost changed: What|Removed |Added Status|New |In Progress Assignee|p

[Bug 229241] pfctl -f /etc/pf.conf blocks loopback interface

2018-08-13 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229241 Kristof Provost changed: What|Removed |Added See Also||https://bugs.freebsd.org/bu