Syntax error in Snapshot pf.conf

2003-02-19 Thread Jason Dixon
I just finished upgrading a 3.2 -stable box to yesterday's snapshot to try out the new IP ID feature (where is that documented?). Anyhoo, there was one rule in the pf.conf that was fine in 3.2, but the snapshot is choking on: pass in on $ext_if proto tcp from $other_net to ($int_if)/24 flags

Re: Syntax error in Snapshot pf.conf

2003-02-19 Thread Henning Brauer
On Wed, Feb 19, 2003 at 09:51:14PM +0100, Srebrenko Sehic wrote: Is there any reason to have 10 ways of writing the same thing? Shouldn't we choose a syntax and stick with that? if you think about it for a minute, $interface/24 and $interface:network are not the same. they CAN expand to teh

Re: Syntax error in Snapshot pf.conf

2003-02-19 Thread kjell
if you think about it for a minute, $interface/24 and $interface:network are not the same. they CAN expand to teh same thing. one possibility. just one. Well true, but in most cases where this is used, the intent is the latter (the network $interface sits on). I would expect :network

Re: Syntax error in Snapshot pf.conf

2003-02-19 Thread Srebrenko Sehic
On Wed, Feb 19, 2003 at 03:08:11PM -0700, [EMAIL PROTECTED] wrote: if you think about it for a minute, $interface/24 and $interface:network are not the same. they CAN expand to teh same thing. one possibility. just one. Well true, but in most cases where this is used, the

Re: Syntax error in Snapshot pf.conf

2003-02-19 Thread Jason Dixon
On Wed, 2003-02-19 at 17:40, Jason Dixon wrote: On Wed, 2003-02-19 at 15:06, Henning Brauer wrote: I assumed it was due to the expansion ($int_if)/24, so I tried with a single IP, and that fixed it. What is the new syntax like for cidr expansion on an interface? I can't find any

Re: Syntax error in Snapshot pf.conf

2003-02-19 Thread Henning Brauer
On Wed, Feb 19, 2003 at 06:49:43PM -0500, Jason Dixon wrote: On Wed, 2003-02-19 at 18:38, Henning Brauer wrote: $int_if:network expands properly, but dynamic () does not work (again, passes test mode ok, but fails with a reload). WHAT does not work? ($interface:network) is not supposed