[Bug 233581] Bugg in PF or in PF man-page?

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Dec 1 18:20:15 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233581

--- Comment #4 from peos42 <peo_s at incedo.org> ---
Hmmm

>From man page regarding "set skip"....
--snip--
List interfaces for which packets should not be filtered.  Packets
           passing in or out on such interfaces are passed as if pf was
           disabled, i.e. pf does not process them in any way.
--snip--

I think the text is clear in the man page... Packets are passed as if PF was
disabled. It also states that PF should not process them in any way. 

Two comments on this..

# 1
If a PF default block rule blocks traffic on lo0 for me when "set skip on lo0"
on active. Then PF *IS* processing packages which the man page clearly say it
should not!

# 2
Lets assume you are right... Then the default block rule should also block
127.0.0.1 over lo0 so that as well have to be explicitly allowed. But it does
not!


So you comment.... Well... I do not agree. But please tell me if I misinterpret
something.

/Peo

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-pf mailing list