On Thu, 4 Aug 2005, Roland Penner wrote:

I am setting up new firewall running OpenBSD 3.7. I am trying to
implement rules using tagging. I ran into trouble with the following
line:

 nat on $ext_if tagged LAN_INET tag LAN_INET_NAT -> ($ext_if)

I get the following error:
/etc/pf.conf:16: syntax error


I am starting with a sample rule set on the OpenBSD website. The problem
line is taken verbatim from the OpenBSD PF documentation:

http://www.openbsd.org/faq/pf/tagging.html#policy

See http://marc.theaimsgroup.com/?l=openbsd-bugs&m=112276608602981&w=2

I noticed this error just a couple of days ago. Change your nat line to:

nat on $ext_if tag LAN_INET_NAT tagged LAN_INET -> ($ext_if)

/Regards, Johan

Reply via email to