Re: Layer-2 filtering in NPF

Greg Troxel <[email protected]> Fri, 04 Jul 2025 21:01:56 -0400
Newsgroups gmane.os.netbsd.devel.network
Message-ID <[email protected]>
Apparently I'm having a different upgrade problem.

I had a rule in npf.conf that was accepted by my previous -current
(early May?), and now it isn't.  That led to the default rules in
npf_conf operating, and those did not allow dhcpcd to succeed.

The rule that is now objected to looks like

    pass in proto udp to any port 11000-11002

(but not those numbers).  Reading the man page, port-opts is

    port-opts       = "port" ( port-num | port-from "-" port-to | var-name )

which indeed my line did not match, so I changed to

    pass in proto udp to any port 11000 - 11002

but I didn't see this in the announced changes.