using ?include? like statement in pf.conf to include some parts from other files

Bjoern A. Zeeb bzeeb-lists at lists.zabbadoz.net
Sun May 8 21:53:04 UTC 2011


On May 8, 2011, at 7:45 PM, Jason Hellenthal wrote:

> 
> Oguz,
> 
> On Sun, May 08, 2011 at 08:39:05PM +0300, Oguz Yilmaz wrote:
>> Hi,
>> 
>> I want to be able to include some parts of my pf.conf from other set of files.
>> 
>> For example I will include "set timeout" vs like statements in another file.
>> 
>> Using anchors and "load anchor from file" statements will not help
>> because anchor can not hold such GLOBAL OPTIONS. In case I set those
>> macros and set statement in a anchor it will be valid for the anchor
>> or not valid at all (set statemenets).
>> 
> 
> At this time as I know, this functionality is not available in pf41 that 
> is and has been a part of FreeBSD for quite some time and believe it still 
> is a part of -CURRENT.
> 
> There has been some work on getting pf up-to-date as of pf45 where there 
> is a patch that is available for -CURRENT only but I am not aware as if it 
> supports the functionality you desire.
> 
> If that is something you are interested in and know is a part of pf45, 
> then you are welcome to upgrade to -CURRENT and apply that patchset if 
> needs be to help test while achieving your objectives.
> 
> Some of the work has been done here:
> http://svn.freebsd.org/base/user/eri/pf45/head/

http://svnweb.freebsd.org/base/projects/pf/pf45/

I hope Ermal will post the final patch RSN and put it into HEAD afterwards.

> 
> And there are various other messages on the lists that you are welcome to 
> search for if interested.
> 
> 
> Good Luck.
> 
> -- 
> 
> Regards, (jhell)
> Jason Hellenthal
> 

-- 
Bjoern A. Zeeb                                 You have to have visions!
         Stop bit received. Insert coin for new address family.



More information about the freebsd-pf mailing list