pf.conf issue

[nulld <nulld_(_at_)_encryptedemail_(_dot_)_net>]

I added a virtual ip address to my external interface.

Everything works okay with binat, except I can't seem to get the following
rule to work any which way I try.

I've tried:

block out quick on $ext from ! { $ip, $ip2 } to any

and

block out quick on $ext from != { $ip, $ip2 } to any

Any suggestions? Or is this a limitation?


thanks.
-nulld