From: Alexandr Nedvedicky Subject: Re: pf.conf.5: additional quoting for ranges in lists To: Quentin Th?bault Cc: "tech@openbsd.org" Date: Tue, 10 Dec 2024 00:11:09 +0100 Hello, On Mon, Dec 09, 2024 at 10:23:50AM +0000, Quentin Th?bault wrote: > @@ -98,6 +100,11 @@ ext_if = "kue0" > all_ifs = "{" $ext_if lo0 "}" > pass out on $ext_if from any to any > pass in on $ext_if proto tcp from any to any port 25 > + > +usr_lan_range = "'192.0.2.0/24'" > +srv_lan_range = "'198.51.100.0 - 198.51.100.255'" > +nat_ranges = \&"{\&" $usr_lan_range $srv_lan_range \&"}\&" > +nat on $ext_if from $nat_ranges to any -> ($ext_if) the last line does not seem to fit pfctl syntax. it feels like ipf (ipfilter) not pf. are you sure the configuration you deal with belongs to pf(4)/pfctl(8) are you using pf on OpenBSD? if so what version? thanks for clarification regards sashan