es in the docs are always based on NAT...
Regards,
Xavier
--
recursion, n.: see recursion.
Hi,
Just one question... Maybe stupid, pardon me!
Can I define sort of "route maps" such as
in Cisco devices with pf?
Ex: if source address = x.x.x.x -> send to next hop "y.y.y.y"
Regards,
Xavier
--
"Research is what I'm doing when I don't know what I'm doing."
- Wernher Von Braun (1912-1977)
x error
@0 block in all
@1 block out all
pfctl: Syntax error in file: pf rules not loaded
If I replace 'default' by 'normal', it works.
$ pfctl -vn -f ./pf.conf-current_normal
ext_if = rl0
set loginterface rl0
set optimization normal
@0 block in all
@1 block out all
--
Xavier Venient
te to -current?
>
--
Xavier Santolaria [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
perl -we '$|=1;print 1;@a=qw(\ | / -);while(){for($i=0;$i<@a;$i++)
{print"\b$a[$i]";select undef,undef,undef,.1}}print"\n"'
s: 1612 Packets: 0 Bytes: 0 States: 0 ]
@3 pass out on rl0 all keep state
[ Evaluations: 1612 Packets: 0 Bytes: 0 States: 0 ]
Where is the problem? Traffic should pass thru those rules? I'm wrong?
Xavier
--
XM3-RIPE
#include
assign an ip to pfsync interface (this is a
good question for pf gurus ?)
/Xavier
--
Xavier Beaudouin - Unix System Administrator & Projects Leader.
President of Kazar Organization : http://www.kazar.net/
Please visit http://caudium.net/, home of Caudium & Camas projects
.
int_lan = "172.16.1.0/24"
rel_int_lan = "172.16.2.0/24"
rel_ext_lan = "172.16.3.0/24"
lans = "{" $int_lan $rel_int_lan $rel_ext_lan "}"
I obtain this error:
# pfctl -nf /etc/pf.conf
/etc/pf.conf:48: syntax error
/etc/pf.conf:83: macro 'lans' not defined
Could you give me the correct syntax?
Thanks
Xavier
