On 2009/04/06 06:05, Henning Brauer wrote:
> 1) scrub rules are completely gone.

there's a reasonably simple way to rewrite your ruleset:

Index: pf.conf
===================================================================
RCS file: /data/cvsroot/sthen/clearip/conf/jodrell/pf.conf,v
retrieving revision 1.25
diff -u -p -u -1 -r1.25 pf.conf
--- pf.conf     6 Mar 2009 22:34:50 -0000       1.25
+++ pf.conf     6 Apr 2009 12:14:36 -0000
@@ -10,6 +10,6 @@ set skip on {lo vr3}
 
-scrub on pppoe0 max-mss 1450 random-id
-scrub on gif1 max-mss 1450 no-df random-id
-scrub in on vlan3666 max-mss 1450 no-df random-id
-scrub in on vlan5 max-mss 1450 no-df random-id
+match on pppoe0 scrub (max-mss 1450 random-id)
+match on gif1 scrub (max-mss 1450 no-df random-id)
+match in on vlan3666 scrub (max-mss 1450 no-df random-id)
+match in on vlan5 scrub (max-mss 1450 no-df random-id)

Reply via email to