Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 01 Dec 2018 18:20:13 +0000
From:      bugzilla-noreply@freebsd.org
To:        pf@FreeBSD.org
Subject:   [Bug 233581] Bugg in PF or in PF man-page?
Message-ID:  <bug-233581-16861-W1v4XM71Mo@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-233581-16861@https.bugs.freebsd.org/bugzilla/>
References:  <bug-233581-16861@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D233581

--- Comment #4 from peos42 <peo_s@incedo.org> ---
Hmmm

>From man page regarding "set skip"....
--snip--
List interfaces for which packets should not be filtered.  Packets
           passing in or out on such interfaces are passed as if pf was
           disabled, i.e. pf does not process them in any way.
--snip--

I think the text is clear in the man page... Packets are passed as if PF was
disabled. It also states that PF should not process them in any way.=20

Two comments on this..

# 1
If a PF default block rule blocks traffic on lo0 for me when "set skip on l=
o0"
on active. Then PF *IS* processing packages which the man page clearly say =
it
should not!

# 2
Lets assume you are right... Then the default block rule should also block
127.0.0.1 over lo0 so that as well have to be explicitly allowed. But it do=
es
not!


So you comment.... Well... I do not agree. But please tell me if I misinter=
pret
something.

/Peo

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-233581-16861-W1v4XM71Mo>