Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Mar 2006 11:33:28 -0800 (PST)
From:      "Bradley W. Dutton" <brad-fbsd-pf@duttonbros.com>
To:        freebsd-pf@freebsd.org
Subject:   include files
Message-ID:  <3681.192.168.0.13.1143747208.squirrel@uno.mnl.com>

index | next in thread | raw e-mail

Hi,

I have 2 routers/firewalls setup with carp/pfsync that keep the network
going with the same pf.conf. Unfortunately the hardware in these boxes is
slightly different so the NICs have different names (em/sis/dc/etc). I
have macros defined at the top of pf.conf for the NICs but I still have to
change the macros each time I copy pf.conf from one box to the other. The
OpenBSD PF page (http://www.openbsd.org/faq/pf/shortcuts.html) alludes to
this scenario but I was wondering if there is a way to include more than
one conf file? It would be nice to have one file contain the macros and
the other contain all of the rules/queues/etc.

What have others done in this scenario? Should I create a pf.conf template
file and a script that swaps in the NIC names and copies the files to each
of the boxes?

Thanks for your time,
Brad



help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3681.192.168.0.13.1143747208.squirrel>