The only way it would make sense to me is if pf.conf had host(name) specified somewhere in the rule; that way it would need to translate it to IP.
All the tests I did in my VM use IPs that are not resolved and it is OK.
I personally think there's something in the setup that makes the parsing the pf.conf ambiguous. But I was not able to reproduce that when I was testing it ..
All the tests I did in my VM use IPs that are not resolved and it is OK.
I personally think there's something in the setup that makes the parsing the pf.conf ambiguous. But I was not able to reproduce that when I was testing it ..