Filter reload error with interface group

  • I managed to get the following error whilst setting up a set of new VLANs on a 2.1-BETA1 (amd64) built on Fri Apr 19 07:42:13 EDT 2013.  This is our office PF so I don't keep it quite as up to date as other ones and I have to be a bit careful when making changes.

    Here's an example rule's error (there were three rules similar to this):

    php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:299: syntax error - The line in question reads [299]: pass in quick on $DOWNSTAIRS inet proto udp from $DOWNSTAIRS to $BLL_Int_DNS keep state label "USER_RULE: DNS"

    I can see from rules.debug that the interface group DOWNSTAIRS is set as:
    table <downstairs>{ }

    also there is a set of System aliases:
    ROOMONE = "{ em1_vlan21 }"
    ROOMTWO = "{ em1_vlan22 }"
    ROOMTHREE = "{ em1_vlan23 }"
    ROOMFOUR = "{ em1_vlan24 }"

    These are the four interfaces making up DOWNSTAIRS.

    and the alias BLL_Int_DNS is:
    table <bll_int_dns>{ }

    I've just tried a quick test with a simple icmp any any rule on the interface group and that failed as well so it seems there might be a problem with the rule trying to expand out the DOWNSTAIRS alias in some way.

    I have another interface alias with shorter names in it and that seems to work fine.

    Any ideas on how I can continue to debug this please?


Log in to reply