I have a slightly elaborate firewall setup where my server usually has between 400 and 800 ip addresses firewalled. It switches back and forth between two different
pf tables. Every day it rebuilds the firewall list in the new table and flushes the old one. It does this all via script and it works very well.
But the problem is this
ALTQ error. Every time you use
pfctl for anything, the first thing it does is output two error lines:
No ALTQ support in kernel ALTQ related functions disabled
Problem is my script runs
pfctl hundreds of times per day. The error log for my script is growing WAY too fast.
Is there any way to suppress these error messages?
pfctl does have a
-q flag but that's only for ignoring non-error output. Is there a way I can more fully disable ALTQ in the config file so it won't even try to use it?
Note that I don't know what ALTQ is, but I know I don't need it. My firewall works perfectly aside from the log flood.