Re: packet filter silently ignores a rule

2024-05-21 Thread Maksim Rodin
Hello! This was the first thing I checked. But I think there was a deadly combo of two factors: 1) the continuation character 2) The nuance described in man pf.conf: "Care should be taken when commenting out multi-line text: the comment is effective until the end of the entire block." After contin

Re: packet filter silently ignores a rule

2024-05-21 Thread Stuart Henderson
On 2024-05-21, Maksim Rodin wrote: > I solved the problem by copying the entire rule block right after > the old one and commenting out the old one. > > New: > pass in on egress inet proto tcp to (egress) port $mail_ports \ > keep state (max-src-conn 20, \ > max-src-conn-rate 35/300, o

Re: packet filter silently ignores a rule

2024-05-21 Thread Maksim Rodin
I solved the problem by copying the entire rule block right after the old one and commenting out the old one. New: pass in on egress inet proto tcp to (egress) port $mail_ports \ keep state (max-src-conn 20, \ max-src-conn-rate 35/300, overload \ flush global) \ rd

packet filter silently ignores a rule

2024-05-20 Thread Maksim Rodin
Hello, I use OpenBSD 7.5 stable amd64. I uncommented an old rule and the corresponding macro in pf.conf which definitely worked when the machine was on version 7.3 and possibly 7.4. After that: pfctl -nf /etc/pf.conf shows nothing pfctl -f /etc/pf.conf shows nothing So Packet Filter seems to be ha