Rules must be in order

[Gergely CZUCZY]

On Sun, Dec 31, 2006 at 05:39:26AM +0000, sukaca wrote:
> dear all
> 
> i just configure pf+altq
> and got error masssage
> 
> this my config
> 
> ext_if="lnc0"   # replace with actual external interface name i.e., dc0
> int_if="lnc0"   # replace with actual internal interface name i.e., dc1
> internal_net1="10.10.1.1/24"
> internal_net2="10.10.2.1/24"
> 
> altq on lnc0 cbq bandwidth 128Kb  queue { internal_net1, internal_net2 }
> queue internal_net2 bandwidth 64Kb cbq(default borrow)
> queue internal_net1 bandwidth 64Kb cbq(red borrow)
> 
> pass out on lnc0 from any to any   queue (internal_net1, internal_net2)
> pass in  on lnc0 from any to any   queue (internal_net1, internal_net2)
> 
> nat on lnc0 from 10.10.1.0/24 to any -> 124.81.224.194
> nat on lnc0 from 10.10.2.0/24 to any -> 124.81.224.194
> 
> the error is
> 
> pfctl -f /etc/pf.conf
> /etc/pf.conf:13: Rules must be in order: options, normalization, queueing,
> translation, filtering
> /etc/pf.conf:14: Rules must be in order: options, normalization, queueing,
> translation, filtering
> pfctl: Syntax error in config file: pf rules not loaded
> 
> where is my wrong
> and what should i do
you should read the docmentation.
start at http://www.openbsd.org/faq/pf/, http://www.freebsd.org/handbook/
and pf.conf(5).

please read the documentation before asking such questions.
> 
> thanks and regard
> 
> vicky
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"
> 

Bye,

Gergely Czuczy
mailto: gergely.czuczy at harmless.hu

-- 
Weenies test. Geniuses solve problems that arise.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 1442 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20061231/acfb57bb/attachment.pgp