pf on bridge interface not working

2021-02-21 Thread Eric Zylstra
This came through to me from the list with “no content”, so I’m trying again. —— My box has three interfaces, dc0 to manage, em0 and em1 for bridging external LAN to internal LAN. hostname.em0: up hostname.em1: up hostname.bridge0: add em0 add em1 up Bridge works, traffi

Re: pf on bridge interface not working

2021-02-21 Thread Erling Westenvik
On Sat, Feb 20, 2021 at 04:17:11PM -0600, Eric Zylstra wrote: > -But- > make one simple change to filter on the bridge0 interface— > > pf.conf: > filtered = "{ bridge0 }” > not_filtered = "{ lo, dc0, em0, em1 }” > block log on $filtered > set skip on $not_filtered > > `doas

Re: pf on bridge interface not working

2021-02-21 Thread Eric Zylstra

Re: pf on bridge interface not working

2021-02-21 Thread Stuart Henderson
On 2021-02-20, Eric Zylstra wrote: > -But- make one simple change to filter on the bridge0 interface-- > pf.conf: > > filtered = "{ bridge0 }" > not_filtered = "{ lo, dc0, em0, em1 }" > block log on $filtered > set skip on $not_filtered > > >> doas pfctl -f /etc/pf.conf > >> doas pfctl -sr > > blo

pf on bridge interface not working

2021-02-20 Thread Eric Zylstra