Hi,
I've read both pf anchor faq and pf.conf man page for 5.0 and my syntax
seem right
but I always get a error while trying to use ` in line anchor. The
anchor line and
closing bracket line both give me the syntax error with pfctl -vnf
/etc/pf.conf
I tryed with and without anchor name. Here a config test file I trying
the anchor on :
achor "test" in on em3 to <lserver> {
pass in quick on em3 proto tcp to 10.5.2.33
port { 21, 4411:4424 } # FTP interne privi
pass in quick on em3 proto udp to
10.5.2.33 # FTP interne privi
pass in quick on em3 proto tcp from <hotspot> to
10.5.2.40 # ancien Mikrotik Usermanager
pass in quick on em3 proto tcp from <hotspot> to
10.5.2.82 # nouveau Mikrotik Usermanager
pass in quick on em3 proto tcp from 10.5.27.254 to 10.5.2.46
port 9443 # Exception Dom Aircontrol
pass in quick on em3 proto tcp to 10.5.2.46
port > 49151 # Aircontrol ???
pass in quick on em3 proto udp to 10.5.2.46
port > 49151 # Aircontrol ???
pass in quick on em3 proto icmp
#
# POLICY RULES FOR PRIVATE_SERVER
block in quick
block out quick
}
a second version without anchor name :
achor in on em3 to <lserver> {
pass in quick on em3 proto tcp to 10.5.2.33
port { 21, 4411:4424 } # FTP interne privi
pass in quick on em3 proto udp to
10.5.2.33 # FTP interne privi
pass in quick on em3 proto tcp from <hotspot> to
10.5.2.40 # ancien Mikrotik Usermanager
pass in quick on em3 proto tcp from <hotspot> to
10.5.2.82 # nouveau Mikrotik Usermanager
pass in quick on em3 proto tcp from 10.5.27.254 to 10.5.2.46
port 9443 # Exception Dom Aircontrol
pass in quick on em3 proto tcp to 10.5.2.46
port > 49151 # Aircontrol ???
pass in quick on em3 proto udp to 10.5.2.46
port > 49151 # Aircontrol ???
pass in quick on em3 proto icmp
#
# POLICY RULES FOR PRIVATE_SERVER
block in quick
block out quick
}
both give me the same error will testing with pfctl -vvnf /etc/testpf.conf :
/etc/testpf.conf:1: syntax error
/etc/testpf.conf:14: syntax error
can anyone told me where the syntax error is ?
Thanks
Michel
dmesg :
OpenBSD 5.0 (GENERIC.MP) #63: Wed Aug 17 10:14:30 MDT 2011
[email protected]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4284088320 (4085MB)
avail mem = 4155924480 (3963MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xfc120 (24 entries)
bios0: vendor American Megatrends Inc. version "080015" date 10/06/2010
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC MCFG OEMB HPET GSCI
acpi0: wakeup devices P0P1(S4) PS2K(S4) PS2M(S4) USB0(S4) USB1(S4)
USB2(S4) USB3(S4) EUSB(S4) P0P4(S4) P0P5(S4) P0P6(S4) P0P7(S4) P0P8(S4)
P0P9(S4) HDAC(S4) USB4(S4) USB5(S4) USBE(S4) GBEC(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Atom(TM) CPU D510 @ 1.66GHz, 1666.87 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG
cpu0: 512KB 64b/line 8-way L2 cache
cpu0: apic clock running at 166MHz
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Atom(TM) CPU D510 @ 1.66GHz, 1666.67 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG
cpu1: 512KB 64b/line 8-way L2 cache
cpu2 at mainbus0: apid 1 (application processor)
cpu2: Intel(R) Atom(TM) CPU D510 @ 1.66GHz, 1666.67 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG
cpu2: 512KB 64b/line 8-way L2 cache
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Atom(TM) CPU D510 @ 1.66GHz, 1666.67 MHz
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG
cpu3: 512KB 64b/line 8-way L2 cache
ioapic0 at mainbus0: apid 4 pa 0xfec00000, version 20, 24 pins
ioapic0: misconfigured as apic 1, remapped to apid 4
acpimcfg0 at acpi0 addr 0xe0000000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 7 (P0P1)
acpiprt2 at acpi0: bus 1 (P0P4)
acpiprt3 at acpi0: bus 2 (P0P5)
acpiprt4 at acpi0: bus 3 (P0P6)
acpiprt5 at acpi0: bus 4 (P0P7)
acpiprt6 at acpi0: bus 5 (P0P8)
acpiprt7 at acpi0: bus 6 (P0P9)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpicpu2 at acpi0
acpicpu3 at acpi0
acpibtn0 at acpi0: PWRB
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Pineview DMI" rev 0x02
vga1 at pci0 dev 2 function 0 "Intel Pineview Video" rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
intagp0 at vga1
agp0 at intagp0: aperture at 0xd0000000, size 0x10000000
inteldrm0 at vga1: apic 4 int 16
drm0 at inteldrm0
"Intel Pineview Video" rev 0x02 at pci0 dev 2 function 1 not configured
ppb0 at pci0 dev 28 function 0 "Intel 82801H PCIE" rev 0x03: msi
pci1 at ppb0 bus 1
em0 at pci1 dev 0 function 0 "Intel PRO/1000 MT (82574L)" rev 0x00: msi,
address 00:90:0b:22:11:4e
ppb1 at pci0 dev 28 function 1 "Intel 82801H PCIE" rev 0x03: msi
pci2 at ppb1 bus 2
em1 at pci2 dev 0 function 0 "Intel PRO/1000 (82583V)" rev 0x00: msi,
address 00:90:0b:22:11:4f
ppb2 at pci0 dev 28 function 2 "Intel 82801H PCIE" rev 0x03: msi
pci3 at ppb2 bus 3
em2 at pci3 dev 0 function 0 "Intel PRO/1000 (82583V)" rev 0x00: msi,
address 00:90:0b:22:11:50
ppb3 at pci0 dev 28 function 3 "Intel 82801H PCIE" rev 0x03: msi
pci4 at ppb3 bus 4
em3 at pci4 dev 0 function 0 "Intel PRO/1000 (82583V)" rev 0x00: msi,
address 00:90:0b:22:11:51
ppb4 at pci0 dev 28 function 4 "Intel 82801H PCIE" rev 0x03: msi
pci5 at ppb4 bus 5
em4 at pci5 dev 0 function 0 "Intel PRO/1000 (82583V)" rev 0x00: msi,
address 00:90:0b:22:11:52
ppb5 at pci0 dev 28 function 5 "Intel 82801H PCIE" rev 0x03: msi
pci6 at ppb5 bus 6
em5 at pci6 dev 0 function 0 "Intel PRO/1000 (82583V)" rev 0x00: msi,
address 00:90:0b:22:11:53
uhci0 at pci0 dev 29 function 0 "Intel 82801H USB" rev 0x03: apic 4 int 23
uhci1 at pci0 dev 29 function 1 "Intel 82801H USB" rev 0x03: apic 4 int 19
uhci2 at pci0 dev 29 function 2 "Intel 82801H USB" rev 0x03: apic 4 int 18
ehci0 at pci0 dev 29 function 7 "Intel 82801H USB" rev 0x03: apic 4 int 23
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb6 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xf3
pci7 at ppb6 bus 7
pcib0 at pci0 dev 31 function 0 "Intel 82801HBM LPC" rev 0x03
pciide0 at pci0 dev 31 function 1 "Intel 82801HBM IDE" rev 0x03: DMA,
channel 0 configured to compatibility, channel 1 configured to compatibility
pciide0: channel 0 disabled (no drives)
pciide0: channel 1 ignored (disabled)
pciide1 at pci0 dev 31 function 2 "Intel 82801HBM SATA" rev 0x03: DMA,
channel 0 configured to native-PCI, channel 1 configured to native-PCI
pciide1: using apic 4 int 18 for native-PCI interrupt
wd0 at pciide1 channel 0 drive 0: <INTEL SSDSA2CT040G3>
wd0: 16-sector PIO, LBA48, 38166MB, 78165360 sectors
wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 6
ichiic0 at pci0 dev 31 function 3 "Intel 82801H SMBus" rev 0x03: apic 4
int 17
iic0 at ichiic0
spdmem0 at iic0 addr 0x50: 2GB DDR2 SDRAM non-parity PC2-5300CL5 SO-DIMM
spdmem1 at iic0 addr 0x51: 2GB DDR2 SDRAM non-parity PC2-5300CL5 SO-DIMM
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1
isa0 at pcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com0: console
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
wbsio0 at isa0 port 0x2e/2: W83627THF rev 0x85
lm1 at wbsio0 port 0xa00/8: W83627THF
mtrr: Pentium Pro MTRR support
vscsi0 at root
scsibus0 at vscsi0: 256 targets
softraid0 at root
scsibus1 at softraid0: 256 targets
root on wd0a (fe331faf55f2cffa.a) swap on wd0b dump on wd0b
WARNING: / was not properly unmounted
