adding on to cedric's answer

you may also want to add ( ) around interface if this outside interface gets address via DHCP

nat on $ext_if from $int_if:network to any -> ($ext_if)


-- clint Cryptek, Inc.



Cedric Berger wrote:

Siju George wrote:
 > Hi all,
 >
 > When my OpenBSD 3.5 System tries to load the PF ruleset it shows the
 > following error.
 >
 > /etc/pf.conf:22: could not parse host specification no IP address
 > found for dc0:172.16.0.0/12
 >
 > the 22nd line of my pf.conf is this.
 >
 > nat on $ext_if from $int_if:172.16.0.0/12 to any -> $ext_if

either (literally):

    nat on $ext_if from $int_if:network to any -> $ext_if

or:

    nat on $ext_if from 172.16.0.0/12 to any -> $ext_if

will work
Cedric

Reply via email to