From owner-freebsd-pf@FreeBSD.ORG Thu Sep 7 22:37:33 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6BA5C16A4DF for ; Thu, 7 Sep 2006 22:37:33 +0000 (UTC) (envelope-from levchenko.i@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.170]) by mx1.FreeBSD.org (Postfix) with ESMTP id ABC9743D53 for ; Thu, 7 Sep 2006 22:37:32 +0000 (GMT) (envelope-from levchenko.i@gmail.com) Received: by ug-out-1314.google.com with SMTP id m2so402631uge for ; Thu, 07 Sep 2006 15:37:31 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=F5Zka/uQaccXiuZV/dH2rJSxqIrAIWNIwtm6ufDRkaENKw7ml64nkDsHEXRWx37Mtv14iYEbcNHpBzwlBIIRJdQ0dDL90WLQbpm92g0FXWkNaR89uBWQqIsNRmOX7Bh+AAMbjbmavZbFXFwaXbKZloe9YEE0FvdSQtjn5XuSE2s= Received: by 10.67.10.12 with SMTP id n12mr711374ugi; Thu, 07 Sep 2006 15:37:31 -0700 (PDT) Received: by 10.66.239.8 with HTTP; Thu, 7 Sep 2006 15:37:30 -0700 (PDT) Message-ID: Date: Fri, 8 Sep 2006 01:37:31 +0300 From: "Ivan Levchenko" To: "Ivan Levchenko" , "eculp@bafirst.com" , freebsd-pf@freebsd.org In-Reply-To: <20060907222649.D8409B828@shodan.nognu.de> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <922498059.20060907160002@yandex.ru> <20060907143415.scknj7rgo40k8k0w@mail.bafirst.com> <20060907222649.D8409B828@shodan.nognu.de> Cc: Subject: Re: pf fails to start X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Sep 2006 22:37:33 -0000 ok, now it doesn't give me a syntax error. but it still gives errors: no IP address found for tun0 /etc/pf.conf:35: could not parse host specification no IP address found for tun0 /etc/pf.conf:47: could not parse host specification no IP address found for tun0 /etc/pf.conf:60: could not parse host specification pfctl: Syntax error in config file: pf rules not loaded when i try to start up pf when the internet connection is down.. is there a way to get pf up without an ip address assinged to a interface? On 9/8/06, Frank Steinborn wrote: > Ivan Levchenko wrote: > > i was having the same problem so i tried this out and here is what i got: > > > > snip from pf.conf > > > > ext_if="tun0" > > > > nat on ($ext_if) from to any -> ($ext_if) # this gives me an error > > That has to go in { }, like everything you list in pf. > -- Best Regards, Ivan Levchenko levchenko.i@gmail.com