Re: pf reload/resync and skipped interface groups on 11.2-RELEASE

2018-07-02 Thread Kristof Provost
On 2 Jul 2018, at 16:44, Felix J. Ogris wrote: this is a fresh install of 11.2-RELEASE amd64 with a minimal pf rule set. After the first reload/resync, any traffic on an interface that is skipped via an interface group statement in pf.conf is rejected: Thanks for the report. I think that’s th

pf reload/resync and skipped interface groups on 11.2-RELEASE

2018-07-02 Thread Felix J. Ogris
Hi, this is a fresh install of 11.2-RELEASE amd64 with a minimal pf rule set. After the first reload/resync, any traffic on an interface that is skipped via an interface group statement in pf.conf is rejected: root@fbsd:~ # ping 127.0.0.1 PING 127.0.0.1 (127.0.0.1): 56 data bytes 64 bytes from