More pf work

Jan Lentfer Jan.Lentfer at
Wed Nov 17 14:39:13 PST 2010

Am 16.11.2010 23:37, schrieb Jan Lentfer:
I have also updated pfctl in my branch now so anyone who is interested 
can actually play with this. I did not really test it yet but loading 
and displaying rulesets works.

There is a nasty panic loop when loading a ruleset with NAT rules, e.g. 
nat on $ext_if from !($ext_if) -> ($ext_if:0)

I could track down the panic as far as line 2113 of pf_table.c

pfr_setflags_ktable(kt, kt->pfrkt_flags&~PFR_TFLAG_REFERENCED);


More information about the Kernel mailing list