Solved PF rules don't load in a jail after upgrade to 15.1

[hedwards]

Hi putney

Thanks your suggestion
But can't try right now because I'm remote using server

I assume this is bug because 15.0-RELEASE have not this problem and 15.1-RELEASE release notes have not change about pf.

Thanks you very much.

Quite possibly, I just spent the morning working out why it is that none of my jails could update packages, it turned out to be that something had changed to prevent the nat instructions in PF from working when I updated to 15.1 in the jails. I didn't see anything in the release notes that would lead me to expect it. But, at least now I've got it working.

EDIT: My issue may well have been my own mistake, reverting to a previous version of my pf.conf seems to have solved it.

 

[epopen]

Quite possibly, I just spent the morning working out why it is that none of my jails could update packages, it turned out to be that something had changed to prevent the nat instructions in PF from working when I updated to 15.1 in the jails. I didn't see anything in the release notes that would lead me to expect it. But, at least now I've got it working.

EDIT: My issue may well have been my own mistake, reverting to a previous version of my pf.conf seems to have solved it.

Hi hedwards

In my case, same /etc/pf.conf work fine @ 15.0-RELEASE failed at 15.1-RELEASE without warning about syntax error.

I'm post new Thread 103189

 

[hedwards]

Hi hedwards

In my case, same /etc/pf.conf work fine @ 15.0-RELEASE failed at 15.1-RELEASE without warning about syntax error.

I'm post new Thread 103189

Same here, it very much had the feeling of something being sort of stuck in a bit of RAM and not getting properly flushed out and refreshed. In my case, I would up redoing my jails back to IPs on the same subnet as my host computer and redoing my PF macros to match that. Before ultimately putting the jails back on the subnet I had been using. I do not for the life of me understand why that seemed to make a difference, I have to assume that there was a line that I had changed between when I updated my host to 15.1 and when I upgraded my jails to 15.1. But, I cannot for the life of me spot any changes that could do that.

EDIT: The only thing I can think of is that getting that first pkg repo update did it. But, it was in a weird state where I could drill to get IPs for host names and ping outside the network, but anything other than drill that required a domain name was just not working.

 

[epopen]

Same here, it very much had the feeling of something being sort of stuck in a bit of RAM and not getting properly flushed out and refreshed. In my case, I would up redoing my jails back to IPs on the same subnet as my host computer and redoing my PF macros to match that. Before ultimately putting the jails back on the subnet I had been using. I do not for the life of me understand why that seemed to make a difference, I have to assume that there was a line that I had changed between when I updated my host to 15.1 and when I upgraded my jails to 15.1. But, I cannot for the life of me spot any changes that could do that.

EDIT: The only thing I can think of is that getting that first pkg repo update did it. But, it was in a weird state where I could drill to get IPs for host names and ping outside the network, but anything other than drill that required a domain name was just not working.

There are too many possibilities, it's hard to debug.
And without detail error message.