I've got the following in my /etc/npf.conf (taken from the blacklistd
man page):
# Transparent firewall example for blacklistd
$ext_if = { wm0, tun0 }
set bpf.jit on;
alg "icmp"
group "external" on $ext_if {
ruleset "blacklistd"
pass final all
}
group default {
pass final all
}
During system startup I'm getting the following message (as logged in
/var/run/rc.log):
[running /etc/rc.d/npf]
Enabling NPF.
/etc/npf.conf:8:27: variable 'ext_if' type 'identifier' has 2 elements
near '$ext_if'
See PR kern/51818 for more details - it seems that the second "element"
in $ext_if is ignored, and the ruleset is applied only to the first
"element".
+------------------+--------------------------+------------------------+
| Paul Goyette | PGP Key fingerprint: | E-mail addresses: |
| (Retired) | FA29 0E3B 35AF E8AE 6651 | paul at whooppee.com |
| Kernel Developer | 0786 F758 55DE 53BA 7731 | pgoyette at netbsd.org |
+------------------+--------------------------+------------------------+
