Index | Thread | Search

From:
Alexandr Nedvedicky <sashan@fastmail.net>
Subject:
Re: pf.conf.5: additional quoting for ranges in lists
To:
Quentin Th?bault <quentin.thebault@defenso.fr>
Cc:
"tech@openbsd.org" <tech@openbsd.org>
Date:
Tue, 10 Dec 2024 00:11:09 +0100

Download raw body.

Thread
Hello,


On Mon, Dec 09, 2024 at 10:23:50AM +0000, Quentin Th?bault wrote:
</snip>
> @@ -98,6 +100,11 @@ ext_if = "kue0"
>  all_ifs = "{" $ext_if lo0 "}"
>  pass out on $ext_if from any to any
>  pass in  on $ext_if proto tcp from any to any port 25
> +
> +usr_lan_range = "'192.0.2.0/24'"
> +srv_lan_range = "'198.51.100.0 - 198.51.100.255'"
> +nat_ranges = \&"{\&" $usr_lan_range $srv_lan_range \&"}\&"
> +nat on $ext_if from $nat_ranges to any -> ($ext_if)

     the last line does not seem to fit pfctl syntax.
    it feels like ipf (ipfilter) not pf.

are you sure the configuration you deal with belongs to pf(4)/pfctl(8)

are you using pf on OpenBSD? if so what version?

thanks for clarification
regards
sashan