using interface groups in pf tables stopped working in 13.0-RELEASE

Peter Ankerstål peter at pean.org
Wed Apr 14 14:48:20 UTC 2021




> On 14 Apr 2021, at 16:16, Peter Ankerstål <peter at pean.org> wrote:
> 
> In pf I use the interface group syntax alot to make the configuration more readable. All interfaces are assigned to a group representing its use/vlan name. 

It seems that the rest of my ruleset is also affected by this, and interface groups combined with :network no longer work.

For example I have this anchor:
    anchor in from trusted:network {
    }

which before resolved to 
    anchor in inet from 172.25.0.0/24 to any {
    }

but now resolves to:
    anchor in inet6 all {
    }

/Peter.


More information about the freebsd-stable mailing list