Hi,

Using today's (Dec 27 2002) current.

# pfctl -f /etc/pf.conf
/etc/pf.conf:21: unknown protocol icmp6
pfctl: Syntax error in file: pf rules not loaded

BTW, pf.conf(5) at line 484 lists icmp6 in known protocols list.

Here's my pf.conf:
-----------------------------------8<--------------[ pf.conf ]--------
set optimization aggressive
set block-policy drop

scrub in on $ext_if all fragment reassemble

nat on $ext_if from $internal_net to any -> $ext_if

block on $ext_if
pass in on $ext_if proto tcp from any to any port 22 keep state
pass in on $ext_if proto { icmp, icmp6 } from ipv6.he.net to $PACKET
pass out on $ext_if from any to any keep state
--------------------------------------------------[ pf.conf ]--->8---

Regards,
-bdd

Reply via email to