[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Unexpected Behaviour ? pf "quick" in negated ranges


I was struggling with a particular pf ruleset, and I discovered this "unexpected behaviour".


   block in from {, ! } to any

This blocks in everything on 192.168 except, as expected.

However, if:

   block in quick from {, ! } to any

the rule expands o parsing by pfctl to:

   block in quick from to any
   block in quick from ! to any

which leads to a highly undesirable result.

Perhaps mention can be made of this in the man pages, or the parser parse this as an error, or the negated range be coded to work with "quick" ??


Get 10mb of inbox space with MSN Hotmail Extra Storage http://join.msn.com/?pgmarket=en-sg

Visit your host, monkey.org