From owner-freebsd-pf@FreeBSD.ORG Fri Sep 2 12:50:10 2011 Return-Path: Delivered-To: freebsd-pf@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 965FF106564A for ; Fri, 2 Sep 2011 12:50:10 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 869368FC08 for ; Fri, 2 Sep 2011 12:50:10 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p82CoA0r063177 for ; Fri, 2 Sep 2011 12:50:10 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p82CoAfd063174; Fri, 2 Sep 2011 12:50:10 GMT (envelope-from gnats) Date: Fri, 2 Sep 2011 12:50:10 GMT Message-Id: <201109021250.p82CoAfd063174@freefall.freebsd.org> To: freebsd-pf@FreeBSD.org From: Patrick Lamaiziere Cc: Subject: Re: misc/160370: Incorrect pfctl check of pf.conf X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Patrick Lamaiziere List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Sep 2011 12:50:10 -0000 The following reply was made to PR kern/160370; it has been noted by GNATS. From: Patrick Lamaiziere To: bug-followup@FreeBSD.org Cc: Subject: Re: misc/160370: Incorrect pfctl check of pf.conf Date: Fri, 2 Sep 2011 14:23:55 +0200 Le Thu, 1 Sep 2011 17:14:54 GMT, Vitalic a écrit : Hi, > >Description: > I am using FreeBSD as firewall and router for LAN. Inet works via NAT. > Here is the small part (macros) of my pf.conf: > > ext_if=tun0 > int_if="bridge0" > ...... > and so on > ...... > > With pfctl -n -f /etc/pf.conf no errors occur (but exactly should). > pfctl -sr and pfctl -sn shows loaded nat and firewall rules, but Inet > (via NAT) no working for LAN. It would be nice to have all the ruleset (pf.conf) and the output of pfctl while loading the rules (pfctl -vvvvv -n -f ) Thanks, regards.