Re: pfctl question

[Henning Brauer <lists-openbsd@bsws.de>]

On Thu, Jun 27, 2002 at 11:57:58AM +0800, Clarence wrote: 
> I updated my system (openbsd-current) with source upto yesterday without
> any error (both the make kernel and make build).  However, I found out the
> pfctl (new one) without the -l option which is important for me to do nat.
> The machines in my lan cannot reach the outside.  After seraching the
> email for the last week and the man pfctl, I didn't found out any answer
> concerning the solution to my problem.  man pftcl, the -l option is there
> but when I try pfctl -h the -l option is not provide.  Can anyone show the
> direction to solve my problem.  Thanks.

-l is important for NAT??? -l sets the log interface.

pfctl has undergone a lot of changes. nat.conf and pf.conf are merged now,
all is in pf.conf now. pfctl -N and -R are dead, use -f instead. (-R and -N
have another purpose now, see pfctl(8)).
pfctl's options -l, -O, -t and -m are dead. they are superseeded by
 set loginterface <if>
 set optimization <modifier>
 set timeout <timeout> <value>
 set limit <limit> <value>
in pf.conf nowadays.