Hi!

On Mon, Mar 09, 2009 at 07:06:10PM -0700, Hilco Wijbenga wrote:
>[...]

>ext_if = "sk0"
>int_if = "sk1"

>set skip on lo
>set block-policy return
>scrub in

>nat log on $ext_if from $int_if:network to any -> ($ext_if)

>block log
>pass out quick from $int_if to $int_if:network
>pass out quick from $ext_if to any
                     ^^^^^^^
>#pass in quick on $ext_if proto { tcp, udp } from any to ($ext_if)
>port { domain, ntp }
>pass in quick on $int_if from $int_if:network to any

You missed the parens in the marked place.

>[...]

Kind regards,

Hannah.

Reply via email to