I'm almost totally new to pf. I'v noticed that this syntax is not accepted: ---- Ext_If = rl0 MyVar = { 1.2.3.4/32, 2.1.0.0/24 }
pass in on $Ext_If from any to !$MyVar ----
beware of rule expansion. PF would expand that to:
pass in on $Ext_If from any to !1.2.3.4/32 pass in on $Ext_If from any to !2.1.0.0/24
which is probably not what you want. with 3.3, you can use a table to do that:
table <MyVar> const { 1.2.3.4/32, 2.1.0.0/24 } pass in on $Ext_If from any to !<MyVar>
Cedric