Support for the enc(4) pseudo-interface

Kristof Provost kristof at sigsegv.be
Tue Mar 21 02:30:33 UTC 2017


On 20 Mar 2017, at 23:08, Marin Bernard wrote:
> Yet, it appears that pf is able to handle references to enc(4) in its 
> ruleset
> even if the kernel does not support it. Is it expected behaviour? Is 
> it
> safe to use such a configuration on a production machine ?
>
pf accepts rules for interfaces that don’t exist (yet), so this is 
expected,
but it won’t do what you want it to do.

Regards,
Kristof


More information about the freebsd-pf mailing list