Can anyone say why this is syntactically correct ...
I_OUTSIDE="em0"
A_ping = "10.0.0.1/32"
pass out log quick on { $I_OUTSIDE } proto icmp from { $A_ping } to any
icmp-type 0 keep state
... and yet this is not ...
I_OUTSIDE="em0"
table <A_ping> { 10.0.0.1/32 }
pass out log quick on { $I_OUTSIDE } proto icmp from { <A_ping> } to any
icmp-type 0 keep state
...
pfctl -n -f /tmp/test1.conf
/tmp/test1.conf:3: must indicate address family with icmp-type/code
/tmp/test1.conf:3: skipping rule due to errors
/tmp/test1.conf:3: rule expands to no valid combination
Release is 4.2 GENERIC#375 i386
Thanks,
Dave
---
Dave Lewney
IT Services, University of Sussex, Brighton BN1 9QT
