Modifying Apple's pf.conf

Hey everyone!

I am sitting here with the following situation:

I just had to reinstall my OS X a while ago. Currently, this Mac Mini was used as a NAT router. It uses its Wifi to connect to the dorms internet, and is supposed to dish the data thru its ethernet port:

	Dorms Wifi —> Mac Mini —> Airport Express in bridge mode —> iPhone, Macbook, etc

The reason why I need this is that the dorms enforces a rule, which allows only one Mac address to be registered with their router. So in order to grant access to more devices, I need to use a NAT router. But here comes the tricky part. At some time, I wish to use a broadband dongle to offer the internet. Previously, I used the following dirty configuration file to manage that kind of „switching“ connection:


nat on en1 from en0:network to any -> (en1)
nat on en2 from en0:network to any -> (en2)
nat on ppp0 from en0:network to any -> (ppp0)
pass in from any to any
pass out from any to any


You can tell, I never used pfctl before, and only needed a dirty but working way of being able to switch my currently nat’ed internet… x)

But here is the problem.
With the new OS X update, the configuration files for pfctl changed. Which means, I am in a loss again.

So the pf.conf file now looks like this:


scrub-anchor "com.apple/*"
nat-anchor "com.apple/*"
rdr-anchor "com.apple/*"
dummynet-anchor "com.apple/*"
anchor "com.apple/*"
load anchor "com.apple" from "/etc/pf.anchors/com.apple“


When I try to append a similar block, but pointing to /etc/pf.anchors/SUBnet instead, I get syntax errors about the order of rules…so I am confused for good.

How do I add the „dirty“ hack from above into my pf.conf in order to keep NATing my internet?
Oh yeah, and Internet Sharing on OS X is broken. the dhcp service used does not dish out a proper lease, meaning that Non-Apple clients are doomed.

Hope you can help me :)

Kind regards,
Ingwie