pfSense

The pfanchordrill PHP playback script parses the output of the pf anchor list and uses it to recurse to find nested anchors. Recently pfctl began printing different errors than in the past which is now tripping up the script. This is a recent regression, it wasn't a problem in the last release.

: pfSsh.php playback pfanchordrill

ipsec rules/nat contents:

Anchor 'ipsec' not found. rules/nat contents:
pfctl: DIOCGETRULES: Invalid argument
pfctl: DIOCGETRULES: Invalid argument

pfctl: DIOCGETRULESETS: No such file or directory rules/nat contents:
pfctl: DIOCGETRULES: Invalid argument
pfctl: DIOCGETRULES: Invalid argument

pfctl: DIOCGETRULESETS: No such file or directory rules/nat contents:
pfctl: DIOCGETRULES: Invalid argument
pfctl: DIOCGETRULES: Invalid argument

pfctl: DIOCGETRULESETS: No such file or directory rules/nat contents:
pfctl: DIOCGETRULES: Invalid argument
pfctl: DIOCGETRULES: Invalid argument
[...]

This repeats indefinitely.

Easy fix is to toss out the errors instead of combining them into stdout.

To me, I have a fix.