PF Syntax error in config file, pf.conf

[TomHsiung]

Hello,

I have added this line to the pf.conf file

nat on ppp0 en0:network to any -> (ppp0)

And when I run

sudo pfctl -e -f /etc/pf.conf

I got:

pfctl: Use of -f option, could result in flushing of rules
present in the main ruleset added by the system at startup.
See /etc/pf.conf for further details.

No ALTQ support in kernel
ALTQ related functions disabled
/etc/pf.conf:24: syntax error
pfctl: Syntax error in config file: pf rules not loaded

 

[michael_hackson]

Will this help you?
https://www.freebsd.org/doc/handbook/firewalls-pf.html

Especially the example:
nat on $ext_if from $localnet to any -> ($ext_if)

Try using that exact syntax and see if it helps.

 

[TomHsiung]

Thanks, Micheal.

Now the NAT function has been enabled.

 

[SirDice]

Use pfctl -nf /etc/pf.conf to test your rules without applying them.

 

[Rhadamanthys]

No ALTQ support in kernel ALTQ related functions disabled

you'll have to recompile the kernel if you want to use ALTQ.
https://www.freebsd.org/doc/handbook/firewalls-pf.html