Considered BETA now [Re: New PF (OpenBSD 3.7 ***ALPHA-preview***)]

Max Laier max at love2party.net
Wed Apr 27 12:55:28 PDT 2005


On Wednesday 27 April 2005 21:21, Greg Hennessy wrote:
> Good evening Daniel.
>
> > On Wed, Apr 27, 2005 at 07:50:16PM +0100, Greg Hennessy wrote:
> > > ~ # pfctl -v -s Anchors -a nbt:nbt
> >
> > Anchors have changed significantly in 3.7. Before, there were
> > only two levels, like "first:second". Now they can be nested
> > arbitrarily, and the syntax is like that of files within
> > (sub)directories, like
>
> I thought as much, I have tried the 3.7 syntax thinking it might be the
> cause but it made no difference, hence the mail to Max.
>
> /me does a quick tweak.
>
> Et voila.
>
> # Discard unwanted NBT traffic
> anchor "nbt/*"
> load anchor "nbt/nbt" from "/etc/pf-nbt.conf"
>
> Pfctl does say its loading the anchor ok
>
> ~ # pfctl -vf /etc/pf.conf | grep -i anchor
> anchor "nbt/*" all
>
> Loading anchor nbt/nbt from /etc/pf-nbt.conf
>
>
> However
>
> ~ # pfctl -s Anchors
>   nbt
> ~ # pfctl -s Anchors -a nbt
>   nbt/nbt
> ~ # pfctl -s Anchors -a "nbt/nbt"

I think you want:

# pfctl -a "nbt/nbt" -sr

here.

<snipp>

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20050427/3567e624/attachment.bin


More information about the freebsd-pf mailing list