https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229241

Daniel Duerr <d...@goboomtown.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |d...@goboomtown.com

--- Comment #10 from Daniel Duerr <d...@goboomtown.com> ---
Hi all,

We are noticing very similar behavior on 11.2-RELEASE after recently upgrading
from 11.1-RELEASE-p11.  Our pf.conf rule set is the same as it was on 11.1. 
Like the original poster here, we had been using "set skip on { lo }" (e.g. the
interface group).  Changing to "set skip on { lo0 }" doesn't really seem to
change the behavior.  Also, we only have one lo0 loopback interface -- no
additional ones.  We also are not using jails.

On boot, everything works as expected.  After some time, pf starts blocking
traffic on lo0.  From there, reloading the rules has mixed effects -- sometimes
it restores lo0 and sometimes it does not.  The only consistent way we seem to
be able to control the behavior once it starts is using `pfctl -d` and `pfctl
-e`.  In other words, if the problem is happening, disabling pf will restore
traffic on lo0 immediately.  If we then re-enable pf, it will block traffic
again on lo0 immediately.

Daniel

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

Reply via email to