From owner-freebsd-pf@FreeBSD.ORG Sun Dec 31 06:04:14 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 34C9016A403 for ; Sun, 31 Dec 2006 06:04:14 +0000 (UTC) (envelope-from myninku@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.189]) by mx1.freebsd.org (Postfix) with ESMTP id C662213C458 for ; Sun, 31 Dec 2006 06:04:13 +0000 (UTC) (envelope-from myninku@gmail.com) Received: by nf-out-0910.google.com with SMTP id x37so6047663nfc for ; Sat, 30 Dec 2006 22:04:12 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type; b=cWghDapcPvkeT+wpLcO1wXKgygiGATrfYBaPWBG1w3vSyiJGg19xSkVO80RXiYjdpI+GOgcaxfzERiQgVSQ+0ts1++/tgI8N8q0FjyoWZksZjMRa+3UELspWesvYsoTCIv+0Pc2BiBM7v3RAoGy124EaLNmxynCkaA+gFhP3Fm4= Received: by 10.49.93.13 with SMTP id v13mr2084796nfl.1167543566472; Sat, 30 Dec 2006 21:39:26 -0800 (PST) Received: by 10.48.206.9 with HTTP; Sat, 30 Dec 2006 21:39:26 -0800 (PST) Message-ID: Date: Sun, 31 Dec 2006 05:39:26 +0000 From: sukaca To: freebsd-pf@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Rules must be in order X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 31 Dec 2006 06:04:14 -0000 dear all i just configure pf+altq and got error masssage this my config ext_if="lnc0" # replace with actual external interface name i.e., dc0 int_if="lnc0" # replace with actual internal interface name i.e., dc1 internal_net1="10.10.1.1/24" internal_net2="10.10.2.1/24" altq on lnc0 cbq bandwidth 128Kb queue { internal_net1, internal_net2 } queue internal_net2 bandwidth 64Kb cbq(default borrow) queue internal_net1 bandwidth 64Kb cbq(red borrow) pass out on lnc0 from any to any queue (internal_net1, internal_net2) pass in on lnc0 from any to any queue (internal_net1, internal_net2) nat on lnc0 from 10.10.1.0/24 to any -> 124.81.224.194 nat on lnc0 from 10.10.2.0/24 to any -> 124.81.224.194 the error is pfctl -f /etc/pf.conf /etc/pf.conf:13: Rules must be in order: options, normalization, queueing, translation, filtering /etc/pf.conf:14: Rules must be in order: options, normalization, queueing, translation, filtering pfctl: Syntax error in config file: pf rules not loaded where is my wrong and what should i do thanks and regard vicky