Skip site navigation (1)Skip section navigation (2) 
Date:      Mon, 16 Mar 2020 10:09:36 +0000
From:      Carlos Lopez <clopmz@outlook.com>
To:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   A pfctl error: inline anchor '_2' already exists
Message-ID:  <580C3FEC-CDDA-4C91-937F-43F58C86CA8B@outlook.com>
next in thread | raw e-mail | index | archive | help 

Hi all,

I am trying to solve a problem with pf on a FreeBSD 12.1 server but I cannot understand the problem.

I have this rule that's working without problems:

anchor inet from { $host1 $host2 $host3 } to (self) label "Allow access from $srcaddr to this host" {
        anchor proto tcp to port ssh {
                pass in
        }
}

But this one returns an error about “inline anchor '_2' already exists” and “syntax error”:

anchor inet from $host5 to (self) {
        anchor proto udp to port { sunrpc nfsd-status nfsd-keepalive nfsd lockd 974 } label "Allow access from $host  to self via $dstport/$proto" {
                pass in proto udp
        }
}

Any idea why? …
--
Regards,
C. L. Martinez

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?580C3FEC-CDDA-4C91-937F-43F58C86CA8B>