CVSROOT: /cvs
Module name: www
Changes by: st...@cvs.openbsd.org 2018/08/02 02:56:40
Modified files:
faq : current.html
Log message:
pfctl/parse.y 1.680 requires that any interfaces specified in PF queues
exist when configuration is loaded. (One common error is using an interface
group in the queue definition; it didn't work before, but was silently
accepted).
Since this can result in pf rules not being loaded at boot which may
lock some people out of machines on a remote update, warn people about it
in current.html.
Rewritten from an earlier proposal from kn@, feedback tb@
(I would much prefer if pfctl warned instead of failing to load the
ruleset in this condition, but I don't know how to do that).
