Saturday, November 15, 2003, 2:33:51 PM, you wrote:
AES> # cat ./test
AES> pass proto tcp from any to any port 111 # correct
AES> pass proto tcp from any to any port = 111 # correct
AES> pass proto tcp from any to any port {111,222} # correct
AES> pass proto tcp from any to any port = {111,222} # incorrect
AES> # pfctl -nf ./test
AES> ./test:4: syntax error
AES> #
AES> is it normal (3.4-stable from 20031113)?
Quite clear from the BNF:
port = "port" ( unary-op | binary-op | "{" op-list "}" )
What would you - for example - expect "port > {111, 222}" to do?
If there is a symbol that can be put between "port" and "{" it's
"element-of"/"not-element-of", but that's not something you'd like to
type, would you?
--
Best regards,
Max mailto:[EMAIL PROTECTED]