From owner-freebsd-pf@FreeBSD.ORG  Tue Feb 20 12:46:30 2007
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id DAB4516BB22
	for <freebsd-pf@freebsd.org>; Tue, 20 Feb 2007 12:06:50 +0000 (UTC)
	(envelope-from snklusov@gmail.com)
Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.171])
	by mx1.freebsd.org (Postfix) with ESMTP id 7798813C4A8
	for <freebsd-pf@freebsd.org>; Tue, 20 Feb 2007 12:06:50 +0000 (UTC)
	(envelope-from snklusov@gmail.com)
Received: by ug-out-1314.google.com with SMTP id 71so688942ugh
	for <freebsd-pf@freebsd.org>; Tue, 20 Feb 2007 04:06:49 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta;
	h=received:date:from:reply-to:x-priority:message-id:to:subject:mime-version:content-type:content-transfer-encoding;
	b=kLwrXS51Y1oEk+0EVkAK9Ejri3DrPQaaFdEqEZT8XC+qcvuGCs/1nDGW1lQx7Xx4eCGWupumlKrvtTcgAfdlT8m5iEyioCUQdx6EOd8NGg20YzEBhhZMgtqyYLqtv2aBEshOOCL5sWgA59XaoqYVJfzk/3U0fBM7z8xYrrMT0Qs=
Received: by 10.67.97.7 with SMTP id z7mr8116206ugl.1171973208988;
	Tue, 20 Feb 2007 04:06:48 -0800 (PST)
Received: from ?10.1.1.59? ( [212.76.164.162])
	by mx.google.com with ESMTP id j1sm10637026ugf.2007.02.20.04.06.46;
	Tue, 20 Feb 2007 04:06:48 -0800 (PST)
Date: Tue, 20 Feb 2007 17:06:45 +0500
From: Sergey Klusov <snklusov@gmail.com>
X-Priority: 3 (Normal)
Message-ID: <913541362.20070220170645@gmail.com>
To: freebsd-pf@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: anchor
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Sergey Klusov <snklusov@gmail.com>
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Feb 2007 12:46:30 -0000

Hello,
i'm trying to use anchors on freebsd6.0 and can't get it working
right.

Here is my example:

pfctl -f - <<EOM
block all
anchor anch
EOM

pfctl -a anch/s1 -f - <<EOM
pass quick proto tcp from any to any port 25
EOM

and it doesn't work at all
no traffic is allowed (can't telnet to remote host, not on 25-th port,
not on any other)
if i use 'anchor anch/*' instead of 'anchor anch' then there is ANY
traffic allowed, not only on 25-th port

tried to use 'anch:s1' instead of 'anch/s1' - same effect.

What do i do wrong?