Dear pf devs,

I found that on FreeBSD 10.1 nested anchors does not work.

This simple config passes traffic from any to 10.2.1.0/24:

anchor from any to 10.2.1.0/24 {
  pass quick all
  block
  block log (to pflog1)
}


If the inner pass is enclosed in another anchor, then the filter drops packets:

anchor from any to 10.2.1.0/24 {
  anchor all {
    pass quick all
    block
  }
  block log (to pflog1)
}

That would be very nice to have this working.

Regards,

Kojedzinszky Richard
Euronet Magyarorszag Informatika Zrt.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"

Reply via email to