[Bug 229092] [pf] [pfsync] States created by route-to rules pfsynced without interface

2019-01-23 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229092 --- Comment #17 from Kristof Provost --- Right, for 3. we come back to the compatibility issue. pfsync has to remain able to run with different versions, so while we could potentially extend the protocol to include this information we

[Bug 229092] [pf] [pfsync] States created by route-to rules pfsynced without interface

2019-01-23 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229092 --- Comment #16 from Kajetan Staszkiewicz --- (In reply to Kristof Provost from comment #15) > (In reply to Kajetan Staszkiewicz from comment #13) > >> - Any rule using interface IP addresses in unnamed table {} will end up >> being

[Bug 229092] [pf] [pfsync] States created by route-to rules pfsynced without interface

2019-01-23 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229092 --- Comment #15 from Kristof Provost --- (In reply to Kajetan Staszkiewicz from comment #13) > - Any rule using interface IP addresses in unnamed table {} will end up being > different on 2 routers unless named {} is used. Ah, because

[Bug 229092] [pf] [pfsync] States created by route-to rules pfsynced without interface

2019-01-23 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229092 --- Comment #14 from Kajetan Staszkiewicz --- To sum it up: I don't think it is feasible to have any functionality depending on ruleset being identical. It is really hard to achieve it and it might not be worth the effort. -- You are

[Bug 229092] [pf] [pfsync] States created by route-to rules pfsynced without interface

2019-01-23 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229092 --- Comment #13 from Kajetan Staszkiewicz --- (In reply to Kristof Provost from comment #12) pfcksum only checks if loaded rules are the same, it does not ensure rules are the same on 2 routers. There are a few ways to have different