kern/147000: [pf] pfctl -m option does not appear to work

[Andrew Thompson]

>Number:         147000
>Category:       kern
>Synopsis:       [pf] pfctl -m option does not appear to work
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed May 26 05:07:34 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Andrew Thompson
>Release:        FreeBSD 9.0-CURRENT amd64
>Organization:
>Environment:
FreeBSD pea.fud.org.nz 9.0-CURRENT FreeBSD 9.0-CURRENT #6 r208406M: Mon May 24 09:15:58 NZST 2010     thompsa at pea.fud.org.nz:/usr/obj/home/thompsa/scratch/fbsvn/head/sys/PEA  amd64
>Description:
When using the -m option do pfctl it should merge with the existing rules and not flush. The output below shows the rules which are currently loaded, then merging a single option and the result is an empty ruleset.
>How-To-Repeat:
[root at pea]# pfctl -sr    
No ALTQ support in kernel
ALTQ related functions disabled
pass in on bge0 inet proto tcp from any to any port = ipp flags S/SA keep state
pass in on bge0 inet proto udp from any to any port = ipp keep state
pass in on bge0 inet6 proto tcp from any to any port = ipp flags S/SA keep state
pass in on bge0 inet6 proto udp from any to any port = ipp keep state
 
[root at pea]# echo "set block-policy return" | pfctl -mf -
No ALTQ support in kernel
ALTQ related functions disabled

[root at pea]# pfctl -sr  
No ALTQ support in kernel
ALTQ related functions disabled
[root at pea]# 
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: