[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

/etc/pf.conf:37:could not parse host specification



Hi folks!
Just another problem:

boot process:
....
net.inetip.forwarding:0->1
starting network
working in ddial mode
using interface: tun0
no IP adress found for tun0
/etc/pf.conf:37:could not parse host specification
pfctl:syntax error in config file: pfrules not loaded
starting system logger
starting ....


this is my /etc/pf.conf (not the original pf.conf, deleted all german comments):


### VAR ###

Ext = "tun0" Int = "xl0" IntNet = "192.168.0.0/24" RouterIP = "192.168.0.3" Loop = "lo0"

table <NoRoute> { 127.0.0.1/8, 172.16.0.0/12, 192.168.0.0/16, !$IntNet, 10.0.0.0
/8, 255.255.255.255/32 }


InServicesTCP = "{ ssh, auth }"

### OPTIONS ###
set loginterface $Ext
set optimization aggressive
scrub on $Ext all fragment reassemble random-id

### QUEING ###
altq on $Ext priq bandwidth 100Kb queue { q_pri, q_def }
queue q_pri priority 7
queue q_def priority 1 priq(default)

### NAT & FORWARD ###
nat on $Ext from $IntNet to any -> $Ext static-port

rdr-anchor redirect
### FILTER ###

#Debug
#pass quick all


block on $Ext
block return log on $Ext

block quick inet6
pass quick on $Loop

block in log quick on $Ext inet proto tcp from any to any flags FUP/FUP
block in log quick on $Ext inet proto tcp from any to any flags SF/SFRA
block in log quick on $Ext inet proto tcp from any to any flags /SFRA
block in log quick on $Ext os NMAP

block in log quick on $Ext inet from <NoRoute> to any
block in log quick on $Ext inet from any to <NoRoute>

pass in quick on $Ext inet proto tcp from any to any port > 49151 user proxy fla
gs S/SAFR keep state


pass in quick on $Ext inet proto icmp all icmp-type 8 code 0 keep state
pass in quick on $Ext inet proto tcp from any to any port $InServicesTCP flags S
/SAFR keep state label ServicesTCP


anchor passin

pass out quick on $Ext keep state queue (q_def,q_pri)

EOF

line 37 is this:
nat on $Ext from $IntNet to any -> $Ext static-port

I already used google to find a solution, but I couldn't find anything which is useful to me.
Thanks for your help.




Visit your host, monkey.org