Actions
Bug #2605
closedFilter rule are not created correctly
Start date:
08/24/2012
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.1
Affected Architecture:
amd64
Description
After upgrading to the latest snapshot, the filter rules refuse to load due to an error:
----
There were error(s) loading the rules: /tmp/rules.debug:109: syntax errorpfctl: Syntax error in config file: pf rules not loaded - The line in question reads [109]: nat on gif0 inet from ...0/ to any -> () ...
The bad rule from line 109 of /tmp/rules.debug:
nat on gif0 inet from ...0/ to any -> ()
The issue went away after I edited filter.inc line 3169:
if($int)
$lines .= "nat on {$int} inet from {$ipnet} to any -> ({$carp_int}) \n";
changed to
if ($int!='gif0')
this isn't the "correct" patch, but should help locate the issue. I am using manual outbound NAT rules.
Actions