not correct behaviour syntax check of pfctl

Виталий Владимирович artemrts at ukr.net
Sat Aug 27 06:07:47 UTC 2011


I am using pf for firewalling and NAT.
I discovered yesterday one not correct behaviour syntax check of pfctl.

In my pf.conf file I have define macros

ext_if=tun0

without quotes (my mistake) and then executed command
pfctl -F all -f /etc/pf.conf

All the rules have been cleaned and then loaded without errors.

pfctl -sr and pfctl -sn show loaded rules, but Internet do not work for LAN network.
When I corrected the mistake (ext_if="tun0") then all work fine.

OS: FreeBSD 9-BETA1 i386

WBR,
Vitalic


More information about the freebsd-bugbusters mailing list