Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Mar 2017 11:30:30 +0900
From:      "Kristof Provost" <kristof@sigsegv.be>
To:        "Marin Bernard" <lists@olivarim.com>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: Support for the enc(4) pseudo-interface
Message-ID:  <E8632919-4335-401A-8F6B-17D24A3F4447@sigsegv.be>
In-Reply-To: <1490018913-f1619c15ef073d0f123d2a0940047986@olivarim.com>
References:  <1490018913-f1619c15ef073d0f123d2a0940047986@olivarim.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 20 Mar 2017, at 23:08, Marin Bernard wrote:
> Yet, it appears that pf is able to handle references to enc(4) in its 
> ruleset
> even if the kernel does not support it. Is it expected behaviour? Is 
> it
> safe to use such a configuration on a production machine ?
>
pf accepts rules for interfaces that don’t exist (yet), so this is 
expected,
but it won’t do what you want it to do.

Regards,
Kristof



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E8632919-4335-401A-8F6B-17D24A3F4447>