Dear pf devs,
I found that on FreeBSD 10.1 nested anchors does not work.
This simple config passes traffic from any to 10.2.1.0/24:
anchor from any to 10.2.1.0/24 {
pass quick all
block
block log (to pflog1)
}
If the inner pass is enclosed in another anchor, then the filter drops
packets:
anchor from any to 10.2.1.0/24 {
anchor all {
pass quick all
block
}
block log (to pflog1)
}
That would be very nice to have this working.
Regards,
Kojedzinszky Richard
Euronet Magyarorszag Informatika Zrt.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"