Project

General

Profile

Actions

Bug #12868

closed

Output from ``pfctl -vvsr`` does not include ``ridentifier`` value in the expected location

Added by Jim Pingle 6 months ago. Updated 5 months ago.

Status:
Resolved
Priority:
Normal
Category:
Operating System
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
22.05
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

On 22.01/2.6.0 when looking at the ruleset with pfctl -vvsr the tracker/ridentifier ID should be in parenthesis after the pf rule number. On current versions it's outputting 0 there instead of the ridentifier value.

On 22.01/2.6.0:

@4(0) block drop in log inet all label "Default deny rule IPv4" ridentifier 1000000103

On previous versions it looked like this:

@5(1000000103) block drop in log inet all label "Default deny rule IPv4" 

The only difference in the generated ruleset is the change from tracker to ridentifier:

22.01/2.6.0:

block in log inet all ridentifier 1000000103 label "Default deny rule IPv4" 

Previous versions:
block in log inet all tracker 1000000103 label "Default deny rule IPv4" 

Actions

Also available in: Atom PDF