Project

General

Profile

Actions

Bug #2605

closed

Filter rule are not created correctly

Added by Johannes Ullrich over 11 years ago. Updated over 11 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Unknown
Target version:
Start date:
08/24/2012
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.1
Affected Architecture:
amd64

Description

After upgrading to the latest snapshot, the filter rules refuse to load due to an error:

----
There were error(s) loading the rules: /tmp/rules.debug:109: syntax errorpfctl: Syntax error in config file: pf rules not loaded - The line in question reads [109]: nat on gif0 inet from ...0/ to any -> () ...

The bad rule from line 109 of /tmp/rules.debug:

nat on gif0 inet from ...0/ to any -> ()

The issue went away after I edited filter.inc line 3169:

if($int)
$lines .= "nat on {$int} inet from {$ipnet} to any -> ({$carp_int}) \n";

changed to

if ($int!='gif0')

this isn't the "correct" patch, but should help locate the issue. I am using manual outbound NAT rules.

Actions

Also available in: Atom PDF