include files
Max Laier
max at love2party.net
Thu Mar 30 19:55:31 UTC 2006
On Thursday 30 March 2006 21:33, Bradley W. Dutton wrote:
> Hi,
>
> I have 2 routers/firewalls setup with carp/pfsync that keep the network
> going with the same pf.conf. Unfortunately the hardware in these boxes is
> slightly different so the NICs have different names (em/sis/dc/etc). I
> have macros defined at the top of pf.conf for the NICs but I still have to
> change the macros each time I copy pf.conf from one box to the other. The
> OpenBSD PF page (http://www.openbsd.org/faq/pf/shortcuts.html) alludes to
> this scenario but I was wondering if there is a way to include more than
> one conf file? It would be nice to have one file contain the macros and
> the other contain all of the rules/queues/etc.
>
> What have others done in this scenario? Should I create a pf.conf template
> file and a script that swaps in the NIC names and copies the files to each
> of the boxes?
You can use pfctl(8)'s -D switch to define the macros on the commandline or
better in rc.conf(5)::pf_flags If you need plenty, that's not a perfect
sollution, I agree. In that case, I'd go for something like:
cat /etc/pf.inc /etc/pf.conf | pfctl -f-
--
/"\ Best regards, | mlaier at freebsd.org
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | mlaier at EFnet
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20060330/f98daad1/attachment.pgp
More information about the freebsd-pf
mailing list