> We're trying to use the :peer modifier to minimize the number of macros

quoted text
> in our pf configuration files.

>

> For some reason we can't get it to work:

>

> # cat /etc/pf.conf

> set skip on lo

>

> block log

>

> pass in quick on fxp0 inet proto tcp from fxp0:peer to fxp0 port ssh

>

> # pfctl -n -f /etc/pf.conf

> no IP address found for fxp0:peer

> /etc/pf.conf:5: could not parse host specification

           :peer         Translates to the point to point interface's peer ad-

                         dress(es).
That won't work.  Your fxp is not a point-to-point interface.  It is a

broadcast interface.  It has many peers, not one.