conf/110838: tagged parameter on nat not working

R Gruyters r.gruyters at
Mon Mar 26 07:50:06 UTC 2007

>Number:         110838
>Category:       conf
>Synopsis:       tagged parameter on nat not working
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Mar 26 07:50:05 GMT 2007
>Originator:     R Gruyters
>Release:        FreeBSD 5.5-RELEASE-p9 #3
FreeBSD 5.5-RELEASE-p9 #3: Thu Feb 22 09:22:35 CET 2007
With PF(4) is possible to set tagged parameters during nat, rdr or binat rules. This works on FreeBSD 6.2, but it doesn't work on FreeBSD 5.2.
I have set the following entries in my pf.conf:


nat on bge0 inet from to any tagged OUT ->
block all
pass in quick on bge1 inet from to any tag OUT keep state

then tried to load them:

# pfctl -f /etc/pf.conf
bla:2: syntax error
At the moment I don't have any work around, although it does work on FreeBSD 6.2.

More information about the freebsd-bugs mailing list