https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=262295
--- Comment #2 from Matteo Riondato <[email protected]> --- Some more investigation: it turns out that the problem is more subtle than I thought. My previous examples of pf.conf were "slimmed down" versions of what I actually tried. The following does not work: table <bruteforce> persist block log quick from <bruteforce> label "bruteforceblock" pass in proto tcp from any to ($interface) port ${tcp_services} keep state \ (max-src-conn 10, max-src-conn-rate 1/4, \ overload <bruteforce> flush global) The following works: table <bruteforce> persist block log quick from <bruteforce> label "mybruteforceblock" pass in proto tcp from any to ($interface) port ${tcp_services} keep state \ (max-src-conn 10, max-src-conn-rate 1/4, \ overload <bruteforce> flush global) The only difference is the label in the block rule. -- You are receiving this mail because: You are the assignee for the bug.
