using ?include? like statement in pf.conf to include some parts from other files

Jason Hellenthal jhell at DataIX.net
Sun May 8 19:45:33 UTC 2011


Oguz,

On Sun, May 08, 2011 at 08:39:05PM +0300, Oguz Yilmaz wrote:
> Hi,
> 
> I want to be able to include some parts of my pf.conf from other set of files.
> 
> For example I will include "set timeout" vs like statements in another file.
> 
> Using anchors and "load anchor from file" statements will not help
> because anchor can not hold such GLOBAL OPTIONS. In case I set those
> macros and set statement in a anchor it will be valid for the anchor
> or not valid at all (set statemenets).
> 

At this time as I know, this functionality is not available in pf41 that 
is and has been a part of FreeBSD for quite some time and believe it still 
is a part of -CURRENT.

There has been some work on getting pf up-to-date as of pf45 where there 
is a patch that is available for -CURRENT only but I am not aware as if it 
supports the functionality you desire.

If that is something you are interested in and know is a part of pf45, 
then you are welcome to upgrade to -CURRENT and apply that patchset if 
needs be to help test while achieving your objectives.

Some of the work has been done here:
http://svn.freebsd.org/base/user/eri/pf45/head/

And there are various other messages on the lists that you are welcome to 
search for if interested.


Good Luck.

-- 

 Regards, (jhell)
 Jason Hellenthal

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 522 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20110508/ad499187/attachment-0001.pgp


More information about the freebsd-pf mailing list