PF WARNING: could not create pflog0

[Alex Seitsinger]

Greetings!

My 13.1 kernel comes included with:

device pf
options PF_DEFAULT_TO_DROP
device pflog

But despite this, both of the following commands fail and produce the proceeding errors:

/sbin/ifconfig pflog0 create
ifconfig: SIOCIFCREATE2: Invalid argument

service pflog start
/etc/rc: WARNING: could not create pflog0

I couldn't find anything in the related manpages or in the source (yet). Any suggestions as to what may be causing this error would be just lovely.

 

[Kristof Provost]

pflog is not included in the pf device. Add `device pflog` too.

By the way, there is at least one known bug with `options PF_DEFAULT_TO_DROP` (https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237477). I strongly recommend running GENERIC configurations.

 

[Alex Seitsinger]

pflog is not included in the pf device. Add `device pflog` too.

By the way, there is at least one known bug with `options PF_DEFAULT_TO_DROP` (https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237477). I strongly recommend running GENERIC configurations.

Ah, you missed the third line in that CODE inclusion (device pflog). Thanks.

 

[Alex Seitsinger]

I'm proud to say that I self-saved my own day. For my fellow time-travelers who are reading this in the future remember to load the kernel module on the host system before attempting to use pflog in a jail whose kernel includes the device. /sbin/kldload pflog