pf.conf for variable interfaces

[Erik Norgaard]

Chad Perrin wrote:
> I'm setting up PF on a FreeBSD laptop that sometimes uses the wireless
> device (iwi0) as its external interface, and sometimes uses the RJ-45
> ethernet device (bge0) as its external interface.  Unfortunately, I
> haven't figured out yet how to make that happen.

How about this:

ext_ifs = "{" iwi0 bge0 "}"
block in quick on ext_ifs all
pass out quick on ext_ifs all keep state
...


As long as you don't need statements like iwi0:network which you 
shouldn't on an endpoint, then I guess this will work.

Erik