This is a discussion on Re: [patch] pfctl: allow multiple tags in "tagged" statement within the mailing.openbsd.tech forums, part of the OpenBSD category; --> * Daniel Hartmeier (daniel@benzedrine.cx) wrote: > > which matches every packet. So you might want to add > > ...
| |||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
| ||||
| * Daniel Hartmeier (daniel@benzedrine.cx) wrote: > > which matches every packet. So you might want to add > > | not matchtag { > filter_opts.match_tags = $2; > filter_opts.match_tag_not = $1; > if ($1 && $2->tail != $2) { > yyerror("tag list negation matches all"); > YYERROR; > } > } > > or at least explain it in the man page Hi, sorry for the delay, I broke my arm. Good point regarding negation, I fixed it and also modified the man page anyway to reflect the code change. If it is deemed necessary similar changes can be done for nat-rules and rdr-rules. |
| Thread Tools | |
| Display Modes | |
|
|