- pfk_hooks: PRE→PF_IN, LOCAL_OUT/POST→PF_OUT v4+v6; replacement/buffer handling with NF_STOLEN + re-injection (documented divergence: re-entry) - pfk_mod: pf_status_init/pfattach + pfi attach via pfk_if event callback - pfk_kern: NET_LOCK holder reentrancy (fix deadlock when notifier fires under the write lock — observed as full-VM network hang) - tools: static pfctl link for musl VMs
6 lines
180 B
Plaintext
6 lines
180 B
Plaintext
# PFLINUX offline parse test — intentionally BROKEN config.
|
|
# `port` with no port spec is a syntax error; pfctl -n must exit non-zero.
|
|
|
|
xif = "lo"
|
|
pass in quick on $xif all port
|