> On 20 Mar 2025, at 12:46, Kihaguru Gathura <pqscr...@gmail.com> wrote: > > Hello, > > Using parentheses around the interface (from 41.90.23.240 to ($ext_if) port > ssh modulate state) name tells pf to re-resolve the address dynamically > whenever the interface is ready during the reboot giving time for pf rules to > load successfully.
yes, the ($interface) syntax is made specifically for these situations (I claim ENOCOFFEE for not noticing, sorry!). Excellent to hear you solved the problem! All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.