[Bug 262295] [pf] Tables and anchors

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=262295

--- Comment #2 from Matteo Riondato <matteo@FreeBSD.org> ---
Some more investigation: it turns out that the problem is more subtle than I
thought. My previous examples of pf.conf were "slimmed down" versions of what I
actually tried.

The following does not work:

table <bruteforce> persist

block log quick from <bruteforce> label "bruteforceblock"

pass in proto tcp from any to ($interface)
  port ${tcp_services} keep state \
  (max-src-conn 10, max-src-conn-rate 1/4, \
  overload <bruteforce> flush global)

The following works:

table <bruteforce> persist

block log quick from <bruteforce> label "mybruteforceblock"

pass in proto tcp from any to ($interface)
  port ${tcp_services} keep state \
  (max-src-conn 10, max-src-conn-rate 1/4, \
  overload <bruteforce> flush global)


The only difference is the label in the block rule.

-- 
You are receiving this mail because:
You are the assignee for the bug.