From owner-freebsd-pf@FreeBSD.ORG Fri Aug 5 09:00:58 2005 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 617AD16A41F for ; Fri, 5 Aug 2005 09:00:58 +0000 (GMT) (envelope-from jorge.dionisio@gmail.com) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.195]) by mx1.FreeBSD.org (Postfix) with ESMTP id E5E9C43D49 for ; Fri, 5 Aug 2005 09:00:57 +0000 (GMT) (envelope-from jorge.dionisio@gmail.com) Received: by wproxy.gmail.com with SMTP id i22so568622wra for ; Fri, 05 Aug 2005 02:00:57 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:user-agent:x-accept-language:mime-version:to:subject:content-type:content-transfer-encoding; b=HUD6QunhLk/BQDMIUGa8BaqY5egvaCAn4FMMzs7YnawEq2wKRwYpTOnhhWYtur4/UPAa9+ko/yW0+e1qkFky809uDFED7qEKKhCti2RWvZf41+m//bCbTRLW3YJBsIGdHW/4/z02T9E9cTctb0OQSoCsrBTzmXLJaonY7oD1BsQ= Received: by 10.54.113.4 with SMTP id l4mr2280079wrc; Fri, 05 Aug 2005 02:00:57 -0700 (PDT) Received: from ?192.168.20.10? ([195.23.50.44]) by mx.gmail.com with ESMTP id g5sm3445485wra.2005.08.05.02.00.56; Fri, 05 Aug 2005 02:00:57 -0700 (PDT) Message-ID: <42F32C2B.5090803@gmail.com> Date: Fri, 05 Aug 2005 10:06:51 +0100 From: Jorge Dionisio User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Problem on altq rules X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Aug 2005 09:00:58 -0000 Hi, I have installed freeBSD 5.4 and built a custom kernel with the ALTQ options, the proble is when load the ruleset I get the following error: /etc/pf.conf:21: syntax error /etc/pf.conf:22: queue q_pri has no parent /etc/pf.conf:22: errors in queue definition /etc/pf.conf:23: queue q_def has no parent /etc/pf.conf:23: errors in queue definition pfctl: Syntax error in config file: pf rules not loaded My complete ruleset is: # macros int_if = "rl1" ext_if = "rl0" tcp_services = "{ 22, 113 }" icmp_types = "echoreq" priv_nets = "{ 127.0.0.0/8, 192.168.151.0/24 }" comp3 = "192.168.0.3" # options set block-policy return set loginterface $ext_if # scrub scrub in all altq on $ext_if priq bandwith 128Kb queue { q_pri, q_dev } queue q_pri priority 7 queue q_def priority 1 priq(default) # nat/rdr nat on $ext_if from $int_if:network to any -> ($ext_if) #rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 \ port 8021 #rdr on $ext_if proto tcp from any to any port 80 -> $comp3 # filter rules block all pass quick on lo0 all block drop in quick on $ext_if from $priv_nets to any block drop out quick on $ext_if from any to $priv_nets pass in on $ext_if inet proto tcp from any to ($ext_if) \ port $tcp_services flags S/SA keep state queue (q_def, q_pri) #pass in on $ext_if proto tcp from any to $comp3 port 80 \ flags S/SA synproxy state #pass in on $ext_if inet proto tcp from port 20 to ($ext_if) \ user proxy flags S/SA keep state #pass in inet proto icmp all icmp-type $icmp_types keep state pass in on $int_if from $int_if:network to any keep state pass out on $int_if from any to $int_if:network keep state pass out on $ext_if proto { udp, icmp } all keep state #pass out on $ext_if proto tcp all modulate state flags S/SA pass out on $ext_if proto tcp from $ext_if to any flags S/SA \ keep state queue (q_def, q_pri) pass in on $ext_if proto tcp from any to $ext_if flags S/SA \ keep state queue (q_def, q_pri) I've also run the command: -bash-2.05b# strings /boot/kernel/kernel | grep -c altq_lookup 1 and got this output. Thansk in advance for any reply, Jorge Dionisio