pfSense

The pf anchor parsing done in pfanchordrill currently may not work with Captive Portal. When a Captive Portal zone has an allowed hostname, the output of the script shows:

cpzoneid_2_allowedhosts rules/nat contents:

hostname_0 rules/nat contents:
pfctl: DIOCGETRULES: Invalid argument
pfctl: DIOCGETRULES: Invalid argument

Even after deleting all allowed hostnames the issue persists until a reboot. This kind of issue has also occurred previously: #13142

To avoid the need to handling each anchor name as well as behavior specific to Captive Portal, change the way that anchors are parsed to instead use the recursive pfctl parameter -a '*'.