I may be wrong here but it seems to me that either http://www.openbsd.org/faq/pf/pools.html#outexample is wrong in it's route-to syntax or the grammer in pf.conf(5) has a bug.
http://www.openbsd.org/faq/pf/pools.html#outexample has 4 statements that contain route to, vis: pass out on $ext_if1 route-to ($ext_if2 $ext_gw2) from $ext_if2 to any The pf.conf(5) grammer says: routehost = ( interface-name [ address [ "/" mask-bits ] ] ) I'm thinking it should be: routehost = "(" interface-name [ address [ "/" mask-bits ] ] ")" ? Karl <[EMAIL PROTECTED]> Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein