New pf_default_rules option and patch

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Thomas Steen Rasmussen via pf <pf_at_freebsd.org>
Date: Fri, 04 Jun 2021 10:06:15 UTC

Hello pf@ and stable@,

I opened a bug with a patch to support loading $pf_default_rules -
which defaults to "block drop log all" - in case loading pf.conf
fails during boot. This is to avoid having 0 rules loaded. The
default is to have the new feature disabled, keeping the
existing behaviout.

The bug and patch and more info can be seen at [1].

Questions welcome, here or in the bug.

Best regards,

Thomas Steen Rasmussen

[1] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256410