From owner-freebsd-pf@FreeBSD.ORG  Tue Nov 29 23:46:12 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EC94B16A420
	for <freebsd-pf@freebsd.org>; Tue, 29 Nov 2005 23:46:11 +0000 (GMT)
	(envelope-from dhartmei@insomnia.benzedrine.cx)
Received: from insomnia.benzedrine.cx (insomnia.benzedrine.cx [62.65.145.30])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EF92F43DF5
	for <freebsd-pf@freebsd.org>; Tue, 29 Nov 2005 23:45:32 +0000 (GMT)
	(envelope-from dhartmei@insomnia.benzedrine.cx)
Received: from insomnia.benzedrine.cx (dhartmei@localhost [127.0.0.1])
	by insomnia.benzedrine.cx (8.13.4/8.12.11) with ESMTP id jATNjGKJ014025
	(version=TLSv1/SSLv3 cipher=DHE-DSS-AES256-SHA bits=256 verify=NO);
	Wed, 30 Nov 2005 00:45:17 +0100 (MET)
Received: (from dhartmei@localhost)
	by insomnia.benzedrine.cx (8.13.4/8.12.10/Submit) id jATNjFip008280;
	Wed, 30 Nov 2005 00:45:15 +0100 (MET)
Date: Wed, 30 Nov 2005 00:45:13 +0100
From: Daniel Hartmeier <daniel@benzedrine.cx>
To: Forrest Aldrich <forrie@forrie.com>
Message-ID: <20051129234513.GG23781@insomnia.benzedrine.cx>
References: <438CE6CA.2030508@forrie.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <438CE6CA.2030508@forrie.com>
User-Agent: Mutt/1.5.10i
Cc: freebsd-pf@freebsd.org
Subject: Re: Variable parsing difference between OpenBSD and FreeBSD?
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Nov 2005 23:46:12 -0000

On Tue, Nov 29, 2005 at 06:39:54PM -0500, Forrest Aldrich wrote:

> On FreeBSD-6-STABLE if I use:
> 
> tcp_services = "imap imaps http https"
> rdr pass on $ext_if inet proto tcp from any to $ext_ad \
>   port { $tcp_services } -> $server
> 
> it fails.

I can't confirm that, it works for me (substituting $ext_if, $ext_ad and
$server with simple values) on 6-release and -stable. What error do you
get, precisely? Are you sure $tcp_services is the only difference to
your working ruleset?

Daniel