Hello,
I've been playing with anchors and ran into an issue.
Code:
-------- ------
| |wpi0 ath0| |
| Laptop |-----------------------------| AP |
| |192.168.2.60 192.168.2.1| |
-------- ------
With this pf.conf on the access point, I can ping ath0 from a wireless client. The client has pf disabled.
Code:
set block-policy return
set skip on lo
block all
anchor "wireless" on ath0 {
pass in all
}
If I [only] change the anchor as shown below, it still works.
Code:
anchor in {
pass in all
}
When I nest anchors, it stops working.
Code:
anchor "wireless" on ath0 {
anchor in {
pass in all
}
}
I'm unsure on whether this is a bug or if I'm missing something.
I did not try this on -current, only on 4.7-stable.
Any pointers/insights?
Thanks.