Re: Connection closed when npf restarting with rules in non-default group

Frédéric Fauberteau writes:
>     group default {
>       # [...]
>       # SSH
>       pass stateful in final family inet4 proto tcp to $ext_ip4 port 
> ssh
>       pass stateful in final family inet6 proto tcp to $ext_ip6 port 
> ssh
>       # [...]
>     }

Actually, 'service npf restart' closes connection if "on" interface is 
added to the rule:

       pass stateful in final on $ext_if family inet4 proto tcp to 
$ext_ip4 port ssh
       pass stateful in final on $ext_if family inet6 proto tcp to 
$ext_ip6 port ssh

Is it a bug or a feature?