Re: Layer-2 filtering in NPF

Greg Troxel <[email protected]> Tue, 08 Jul 2025 07:51:08 -0400
Newsgroups gmane.os.netbsd.devel.network
Message-ID <[email protected]>
I am also seeing serious problems, but I haven't quite figured them out.

Sorry this is vague but better to be vague now and clearer later than wait.

First, the presence of a map line for an interface that doesn't exist
used to be fine, and now it seems to break parsing with a strange error.

Second, with a group default and no layer-2 rules (and the config that
used to work fine), I'm also seeing that traffic is blocked enough that
things go badly.