Re: pfctl -t private_ips -vTshow

On Thursday 16 December 2004 09:05, sam wun wrote:
> Hi
>
> The following pfctl command returns error
>
> # pfctl -t private_ips -vTshow
> pfctl: Table does not exist.
>
> The table optin is defined in he pf.conf as shown below:
> table <private_ips> { 10.0.0.0/8, !10.1.0.0/16, 192.168.0.0/24,
> 192.168.1.18 }
>
> Have I used incorrect syntax?

From pf.conf(5):
|     persist  The persist flag forces the kernel to keep the table even when
|              no rules refer to it.  If the flag is not set, the kernel will
|              automatically remove the table when the last rule referring to
|              it is flushed.

i.e. if you don't have a rule using the table pf will trow it away unless you 
define the table as persist(ent) as in:

table <private_ips> persistent { ... }

-- 
/"\  Best regards,                      | mlaier_at_freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier_at_EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News