> We're trying to use the :peer modifier to minimize the number of macros
> in our pf configuration files.
>
> For some reason we can't get it to work:
>
> # cat /etc/pf.conf
> set skip on lo
>
> block log
>
> pass in quick on fxp0 inet proto tcp from fxp0:peer to fxp0 port ssh
>
> # pfctl -n -f /etc/pf.conf
> no IP address found for fxp0:peer
> /etc/pf.conf:5: could not parse host specification
:peer Translates to the point to point interface's peer ad-
dress(es).
That won't work. Your fxp is not a point-to-point interface. It is a
broadcast interface. It has many peers, not one.