Re: Does pf's Sources table ever get cleared?

Hi,

I apologize! I just got educated :)

Without reading your original email without attention to detail, I
assumed your overload was to a table called "Sources".
eg... overload <Sources> flush global

I was not aware of the existance of the "Sources" table. Now I am! lol.

I did confirm that the "pfctl -F Sources" does not empty my "Sources"
table on my stock OpenBSE 6.1.

Interesting...

Thanks for clarifying. I learned something :)

Cheers,
Steve


On 02/08/2017 2:59 PM, Markus Wernig wrote:
> On 02.08.2017 16:07, Steve Williams wrote:
>> pfctl -t Sources -T flush
> Thanks for the hints. The above yields an error here:
>
> # pfctl -t Sources -T flush
> pfctl: Table does not exist.
>
> pfctl(8) is rather clear on the topic:
> ...
> -F modifier
> Flush the filter parameters specified by modifier (may be
> abbreviated):
> ...
> -F Sources Flush the source tracking table.
>
> The problem appears to be not so much with dynamic tables, but with the
> way src-nodes are expired (but not flushed).
>
> best /markus