On 05/19/11 11:43, Reyk Floeter wrote: > On Thu, May 19, 2011 at 11:26:59AM +0200, Claudio Jeker wrote: >> To be honest I'm not sure who will do a 'set skip on sis' or >> 'set skip on em'. > > I would ;-)
You would, however, not have a big problem adding 'group em' to the corresponding /etc/hostname.em*'s. >> I think the very important bit is this: >>> Hmmm, looking further, it seems ordinary rules only match on the >>> interface name or group as well (in pfi_kif_match()), so maybe >>> you're just plain right after all. :-) >> >> set skip is currently special and works in a not so expected way so it is >> better to make it work like all other users of interface names and people >> needing 'set skip on em' should add a 'group em' line to their >> hostname.em* files. >> > > "ifconfig em" also works, so i think it would be less special and > confusing if "set skip on em" would just work without extra config > magic. Yes, that's ifconfig, but I believe "pass in on em" will not, and that's a better comparison. I'd expect "pass|match|block .. on $if" and "set skip on $if" to behave in the same manner. /Alexander > > reyk
