> We're trying to use the :peer modifier to minimize the number of macros
> in our pf configuration files.
> 
> For some reason we can't get it to work:
> 
> # cat /etc/pf.conf
> set skip on lo
> 
> block log
> 
> pass in quick on fxp0 inet proto tcp from fxp0:peer to fxp0 port ssh
> 
> # pfctl -n -f /etc/pf.conf
> no IP address found for fxp0:peer
> /etc/pf.conf:5: could not parse host specification

           :peer         Translates to the point to point interface's peer ad-
                         dress(es).

That won't work.  Your fxp is not a point-to-point interface.  It is a
broadcast interface.  It has many peers, not one.

Reply via email to