Saturday, November 15, 2003, 2:33:51 PM, you wrote:

AES> # cat ./test
AES> pass proto tcp from any to any port 111         # correct
AES> pass proto tcp from any to any port = 111       # correct
AES> pass proto tcp from any to any port {111,222}   # correct
AES> pass proto tcp from any to any port = {111,222} # incorrect
AES> # pfctl -nf ./test
AES> ./test:4: syntax error
AES> #

AES> is it normal (3.4-stable from 20031113)?

Quite clear from the BNF:
port           = "port" ( unary-op | binary-op | "{" op-list "}" )

What would you - for example - expect "port > {111, 222}" to do?
If there is a symbol that can be put between "port" and "{" it's
"element-of"/"not-element-of", but that's not something you'd like to
type, would you?

-- 
Best regards,
 Max                            mailto:[EMAIL PROTECTED]

Reply via email to