Frédéric Fauberteau writes:
group default { # [...] # SSHpass stateful in final family inet4 proto tcp to $ext_ip4 port ssh pass stateful in final family inet6 proto tcp to $ext_ip6 port ssh# [...] }
Actually, 'service npf restart' closes connection if "on" interface is added to the rule:
pass stateful in final on $ext_if family inet4 proto tcp to $ext_ip4 port ssh pass stateful in final on $ext_if family inet6 proto tcp to $ext_ip6 port ssh
Is it a bug or a feature?