From owner-freebsd-pf@FreeBSD.ORG Sun Dec 31 08:45:02 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 5379B16A407 for ; Sun, 31 Dec 2006 08:45:02 +0000 (UTC) (envelope-from gergely.czuczy@harmless.hu) Received: from marvin.harmless.hu (marvin.harmless.hu [195.56.55.204]) by mx1.freebsd.org (Postfix) with ESMTP id D04DA13C45A for ; Sun, 31 Dec 2006 08:45:01 +0000 (UTC) (envelope-from gergely.czuczy@harmless.hu) Received: from localhost (marvin-mail [192.168.0.2]) by marvin.harmless.hu (Postfix) with ESMTP id 8798B7BFCCF; Sun, 31 Dec 2006 09:21:02 +0100 (CET) X-Virus-Scanned: by amavisd-new-2.4.2 (20060627) (Debian) at harmless.hu Received: from marvin.harmless.hu ([192.168.0.2]) by localhost (marvin.harmless.hu [192.168.0.2]) (amavisd-new, port 10024) with ESMTP id J3UOzm3wZWz1; Sun, 31 Dec 2006 09:21:02 +0100 (CET) Received: from marvin.harmless.hu (localhost [127.0.0.1]) by marvin.harmless.hu (Postfix) with ESMTP id 1520D7BFCC9; Sun, 31 Dec 2006 09:21:01 +0100 (CET) Date: Sun, 31 Dec 2006 09:21:01 +0100 From: Gergely CZUCZY To: sukaca Message-ID: <20061231082101.GA42160@harmless.hu> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=x-unknown; protocol="application/pgp-signature"; boundary="M9NhX3UHpAaciwkO" Content-Disposition: inline In-Reply-To: User-Agent: mutt-ng/devel-r804 (FreeBSD) Cc: freebsd-pf@freebsd.org Subject: Re: Rules must be in order X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 31 Dec 2006 08:45:02 -0000 --M9NhX3UHpAaciwkO Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Dec 31, 2006 at 05:39:26AM +0000, sukaca wrote: > dear all >=20 > i just configure pf+altq > and got error masssage >=20 > this my config >=20 > ext_if=3D"lnc0" # replace with actual external interface name i.e., dc0 > int_if=3D"lnc0" # replace with actual internal interface name i.e., dc1 > internal_net1=3D"10.10.1.1/24" > internal_net2=3D"10.10.2.1/24" >=20 > altq on lnc0 cbq bandwidth 128Kb queue { internal_net1, internal_net2 } > queue internal_net2 bandwidth 64Kb cbq(default borrow) > queue internal_net1 bandwidth 64Kb cbq(red borrow) >=20 > pass out on lnc0 from any to any queue (internal_net1, internal_net2) > pass in on lnc0 from any to any queue (internal_net1, internal_net2) >=20 > nat on lnc0 from 10.10.1.0/24 to any -> 124.81.224.194 > nat on lnc0 from 10.10.2.0/24 to any -> 124.81.224.194 >=20 > the error is >=20 > pfctl -f /etc/pf.conf > /etc/pf.conf:13: Rules must be in order: options, normalization, queueing, > translation, filtering > /etc/pf.conf:14: Rules must be in order: options, normalization, queueing, > translation, filtering > pfctl: Syntax error in config file: pf rules not loaded >=20 > where is my wrong > and what should i do you should read the docmentation. start at http://www.openbsd.org/faq/pf/, http://www.freebsd.org/handbook/ and pf.conf(5). please read the documentation before asking such questions. >=20 > thanks and regard >=20 > vicky > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" >=20 Bye, Gergely Czuczy mailto: gergely.czuczy@harmless.hu --=20 Weenies test. Geniuses solve problems that arise. --M9NhX3UHpAaciwkO Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (FreeBSD) owG1VUFrJEUUjru6Cy17yD94xEtCunu6eyYh05Lsxk1YREVwAx5EQnX365naVFd1 qqozOxE9eVDwIF48iHjwIuiCiCcR/Af+Bw/iZb2IP8BXPdOZzLquitg0dFe99773 3vfqvfrwxtWVK6s/fv3tG5sffPTJUw+un2V+1VgrR0HF9BmXQRxFcTBI4u2IfoOt 4U6URNvDPmKcD1l5+LH+9baSFqUNjqY1pmDxvu3VgnH5PORjpg3a3caWwY7X6R1w UyvDLVcyBS4Fl3ghO9JMmhJ1cChzVXA5SuG0URaLoNZcWpYJ9LxXJdxtpA8HmEM/ 9iGJom1gFqKttD9Mk+39V2AzoscH05ywnMFEE0Tq7UGBTAMTwtvbTSJac7jXGAu5 kiUfNRqhLjeZsKckYrKAkbKAWisNFTPGsBF2hnbMDVTTuWW3S6kf83K3f7AmZB6t AcBzoJHIyBEm3I6B5bZhwumhlvRDKaEunViyCoGHGPpQ5G1o8p9htRBPwIpnWK3O sUQbO8g4Ct0bxr1ksPaIQrJQSDqFWXqOGVASXECQZ6eQEUkTXlAwcbLzUgZUK2wQ 3lp26C/Dw9sENVNc3l+gbQ8IjBysF1iyRljIFFVhsvFYw/hxhhqLhdEs+ppKCKqx FxmUWlVU5ilY1X668NefFP1Gh8Ql/GekWWCSPRJTV52IyO8ggz3ieBDuxGFCn3g4 +GvD5O8MuyOM88PNzQVHZW4FBCX00Oa9ugzd+ab9y8s07qfwWiOQGsA1T+bKAUoX qFNQtWtr44NUumKCnzO39md8UDv7zrHrcTEXlFwQJyT5k5fB/+SlzTGFu1MaJ/c7 BuS8k50mDbG6BN36ljQBhGIFFh1FkzHSnJh1P82VFtLNismYqmHGqhEFjZVCeVPV dGuNrGj5LlRe0Zhrowo9Y5m2bnCNra3TXm8ymYSqRpmZIlR61CvZKdHR8y/LS43Y ycfkN1PqpOe5AObErW9thJ5XC2QGlxw3F56JzFJREsycECU0JPOxo860pIaL88Hk iWlz0zhi+oKBM56fTOl7/O8espgHH9TlrUt50HDlwgUiuLGkNc/WrcxSvk6vYrKV cFmq3gKPzI4UNNI0mck1z5BmP1LkrgOcmeuGtYV6cEnzcijzUee9MEXf8+6gHqGY wu3zJj+feg7HqhRGs+0wb7dv0R1X0VEx4bjxvCBw9q8jSk6nxxKnIdyhRWNoaZQ4 oytGK7rFKuMIpuprbjD03rt59ZkVd5l2V/HqlR9+X/nsnc9ffPPLb/b3v3r56S+u 2d8eHj549nzl09Xv4N7P7//kDXJ4+O7R96MbB79c+wM= =inyn -----END PGP SIGNATURE----- --M9NhX3UHpAaciwkO--