Howdy!
I have a global table defined in pf.conf that I would like to use in both the
main rule set and inside an anchor. However, I keep getting a namespace
collision when I reload the configuration file. I can't quite figure out from
reading the man pages if you're not supposed to use a global table inside an
anchor or if I'm just doing it the wrong way. Any ideas?
table <bruteforce> persist
block quick from <bruteforce>
pass in proto tcp to port ssh modulate state \
(max-src-conn-rate 5/3, overload <bruteforce> flush global)
anchor "ftp" {
pass in proto tcp to port ftp modulate state \
(max-src-conn 2, overload <bruteforce> flush global )
pass in proto tcp to port { 40000:50000 }
pass out proto tcp to port ftp
}
