From owner-freebsd-pf@FreeBSD.ORG  Mon Jan 24 20:41:44 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 598E716A4CE
	for <freebsd-pf@freebsd.org>; Mon, 24 Jan 2005 20:41:44 +0000 (GMT)
Received: from mxsf05.cluster1.charter.net (mxsf05.cluster1.charter.net
	[209.225.28.205])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D587943D1D
	for <freebsd-pf@freebsd.org>; Mon, 24 Jan 2005 20:41:43 +0000 (GMT)
	(envelope-from pathiaki@pathiaki.com)
Received: from mxip20.cluster1.charter.net (mxip20a.cluster1.charter.net
	[209.225.28.150])j0OKfgWn032438
	for <freebsd-pf@freebsd.org>; Mon, 24 Jan 2005 15:41:42 -0500
Received: from cpe-66-189-12-20.ma.charter.com (HELO pc4.atlantisservices.com)
	(66.189.12.20)  by mxip20.cluster1.charter.net with ESMTP;
	24 Jan 2005 15:41:43 -0500
X-Ironport-AV: i="3.88,148,1102309200"; 
   d="scan'208"; a="656282106:sNHT47114444"
From: "Paul J. Pathiakis" <pathiaki@pathiaki.com>
To: freebsd-pf@freebsd.org
Date: Mon, 24 Jan 2005 15:41:41 -0500
User-Agent: KMail/1.7.2
MIME-Version: 1.0
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200501241541.41601.pathiaki@pathiaki.com>
Subject: Dynamic Addresses and PF
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical discussion and general questions about packet filter (pf)
	<freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Jan 2005 20:41:44 -0000

Hi,

	if I'm using a DSL dynamic address, on an external i/f, should I be using 
the parentheses everywhere?  

ext_if2 = "tun0"
ext_gw2 = "70.1.2.3"

	That is, on a NAT rule such as:

nat on $ext_if2 from $lan_net2 to any -> ($ext_if2)

should I write it as:

nat on ($ext_if2) from  $lan_net2 to any -> ($ext_if2)

?

Also, since ext_if2 is declared as "tun0" for a DSLconnection, is there a way 
to replace ext_gw2 in all my rules be something like ($ext_if2)?

That is, could I do this:

ext_gw2 = ($ext_if2) 

at the beginning of declarations to allow the ext_gw2 variable to be set to 
the dynamic IP address of the ext_if2?

Is this possible?

Thanks!

Paul Pathiakis