Actions
Todo #16551
open
Update output and parsing behavior for PHP shell ``pfanchordrill``
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
25.11
Release Notes:
Default
Description
The pf anchor parsing done in pfanchordrill currently may not work with Captive Portal. When a Captive Portal zone has an allowed hostname, the output of the script shows:
cpzoneid_2_allowedhosts rules/nat contents: hostname_0 rules/nat contents: pfctl: DIOCGETRULES: Invalid argument pfctl: DIOCGETRULES: Invalid argument
Even after deleting all allowed hostnames the issue persists until a reboot. This kind of issue has also occurred previously: #13142
To avoid the need to handling each anchor name as well as behavior specific to Captive Portal, change the way that anchors are parsed to instead use the recursive pfctl parameter -a '*'.
Updated by
Actions