From owner-freebsd-pf@FreeBSD.ORG Thu Mar 30 19:33:31 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E9E0616A41F for ; Thu, 30 Mar 2006 19:33:31 +0000 (UTC) (envelope-from brad-fbsd-pf@duttonbros.com) Received: from uno.mnl.com (uno.mnl.com [63.97.246.49]) by mx1.FreeBSD.org (Postfix) with SMTP id 8AE4C43D4C for ; Thu, 30 Mar 2006 19:33:31 +0000 (GMT) (envelope-from brad-fbsd-pf@duttonbros.com) Received: (qmail 93764 invoked by uid 85); 30 Mar 2006 19:33:29 -0000 Received: from 127.0.0.1 by uno (envelope-from , uid 89) with qmail-scanner-1.25 (spamassassin: 2.55. Clear:RC:1(127.0.0.1):. Processed in 0.136528 secs); 30 Mar 2006 19:33:29 -0000 Received: from unknown (HELO uno.mnl.com) (127.0.0.1) by localhost with SMTP; 30 Mar 2006 19:33:28 -0000 Received: from 192.168.0.13 (SquirrelMail authenticated user bdutton) by uno.mnl.com with HTTP; Thu, 30 Mar 2006 11:33:28 -0800 (PST) Message-ID: <3681.192.168.0.13.1143747208.squirrel@uno.mnl.com> Date: Thu, 30 Mar 2006 11:33:28 -0800 (PST) From: "Bradley W. Dutton" To: freebsd-pf@freebsd.org User-Agent: SquirrelMail/1.4.6 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Subject: include files X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: brad-fbsd-pf@duttonbros.com List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Mar 2006 19:33:32 -0000 Hi, I have 2 routers/firewalls setup with carp/pfsync that keep the network going with the same pf.conf. Unfortunately the hardware in these boxes is slightly different so the NICs have different names (em/sis/dc/etc). I have macros defined at the top of pf.conf for the NICs but I still have to change the macros each time I copy pf.conf from one box to the other. The OpenBSD PF page (http://www.openbsd.org/faq/pf/shortcuts.html) alludes to this scenario but I was wondering if there is a way to include more than one conf file? It would be nice to have one file contain the macros and the other contain all of the rules/queues/etc. What have others done in this scenario? Should I create a pf.conf template file and a script that swaps in the NIC names and copies the files to each of the boxes? Thanks for your time, Brad