source limiting NATed connections

[Peter N. M. Hansteen]

Vasily Ivanov <freebsdpf at academ.org> writes:

> When I try to put rule like this: "nat on $ext_if from $private_net to any -> 
> $nat_addr (source-track rule, max-src-states 10)" into pf.conf I get 
> a "syntax error" message. 

Put the source tracking part in your pass rules instead.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
"First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.