I found myself with a weird connection problem at home on Monday morning. I could no longer reach my blog or any of the other services hosted either via my reverse proxy or the docker host behind it.
I thought I'd broken something on my work laptop at first but I was seeing the problem on other devices.
Long story short.... OpenBSD uses the pf firewall and has a tool to load new rules. It also has a way to test the rules before you make them live, to avoid mistakes, using 'pfctl -nf /etc/pf.conf'... well, over the weekend, guess who updated a few rules but failed to test them? Yep, this guy. So, when my backup routine ran on the VM in question overnight Sunday/Monday and restarted it, the broken ruleset prevented pf from starting, cutting everything behind it off from the world.
Every day's a school day. Some days it's college, others it's kindergarten.
