summaryrefslogtreecommitdiff
path: root/distrib/i386
diff options
context:
space:
mode:
authorAlexandr Nedvedicky <sashan@cvs.openbsd.org>2024-07-14 19:51:09 +0000
committerAlexandr Nedvedicky <sashan@cvs.openbsd.org>2024-07-14 19:51:09 +0000
commit24f92dc0bcbd90e32c6abc62cacc36880d4508dd (patch)
tree27aa7aac94b69d186d7d60e854ba6ff5c8597404 /distrib/i386
parentcad2e0c2e80922c4690ac9b198de1ecd80f03706 (diff)
This change allows user to define table inside the anchor like that:
anchor foo { table <bar> { 192.168.1.1 } pass in from <bar> to <self> } Without this diff one must either create table <bar> in main ruleset (root) or use 'pfctl -a foo -t bar -T add 192.168.1.1' This glitch is hard to notice. Not many human admins try to attach tables to non-global anchors. Deamons which configure pf(4) automatically at run time such as relayd(8) and spamd(8) create tables attached to thair anchors (for example 'relayd/*') but the deamons use way similar to pfctl(8) to add and manage those tables. The reason why I'd like to seal this gap is that my long term goal is to turn global `pfr_ktable` in pf(4) into member of pf_anchor. So each ruleset will get its own tree of tables. feedback and OK bluhm@
Diffstat (limited to 'distrib/i386')
0 files changed, 0 insertions, 0 deletions