Hi, Using today's (Dec 27 2002) current.
# pfctl -f /etc/pf.conf /etc/pf.conf:21: unknown protocol icmp6 pfctl: Syntax error in file: pf rules not loaded BTW, pf.conf(5) at line 484 lists icmp6 in known protocols list. Here's my pf.conf: -----------------------------------8<--------------[ pf.conf ]-------- set optimization aggressive set block-policy drop scrub in on $ext_if all fragment reassemble nat on $ext_if from $internal_net to any -> $ext_if block on $ext_if pass in on $ext_if proto tcp from any to any port 22 keep state pass in on $ext_if proto { icmp, icmp6 } from ipv6.he.net to $PACKET pass out on $ext_if from any to any keep state --------------------------------------------------[ pf.conf ]--->8--- Regards, -bdd