From owner-freebsd-pf@FreeBSD.ORG Mon Aug 21 19:45:05 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 35EB716A4DA for ; Mon, 21 Aug 2006 19:45:05 +0000 (UTC) (envelope-from zope@2012.vi) Received: from efit.xs4all.nl (efit.xs4all.nl [82.92.236.145]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7621843D98 for ; Mon, 21 Aug 2006 19:44:53 +0000 (GMT) (envelope-from zope@2012.vi) Received: from [10.0.0.172] (198puntacana97.codetel.net.do [200.88.97.198]) by efit.xs4all.nl (Weasel v1.73); 21 Aug 2006 21:40:56 Message-ID: <44EA0D2F.2020200@2012.vi> Date: Mon, 21 Aug 2006 15:44:47 -0400 From: beno User-Agent: Thunderbird 1.5.0.5 (Windows/20060719) MIME-Version: 1.0 To: Max Laier , freebsd-pf@freebsd.org References: <44E9C775.5060009@2012.vi> <55e8a96c0608211010q35b64221sad299c67f8ebb888@mail.gmail.com> <44E9EE39.3050404@2012.vi> <200608211943.12721.max@love2party.net> In-Reply-To: <200608211943.12721.max@love2party.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Subject: Re: Never Ask Questions On A Friday Afternoon X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2006 19:45:05 -0000 Max Laier wrote: > printf 'list="{ 10/8, 192.168.0/24 }"\npass from $list to any\n' | > pfctl -nvf- > > list = "{ 10/8, 192.168.0/24 }" > pass inet from 10.0.0.0/8 to any > pass inet from 192.168.0.0/24 to any > I'm sure I misunderstand. Here is *my* code: shinjiru_ip_addresses="202.71.102.114 202.71.100.126 202.71.106.30 202.71.106.118 202.71.106.188 203.142.1.8" directv_ip_addresses="{ 69.19.0.0/17 }" shadday_ip_addresses="" ssh_ip_addresses="{" $shinjiru_ip_addresses $directv_ip_addresses $shadday_ip_addresses "}" The parser throws an error on the last line because it won't render $directv_ip_addresses Now, I could do something really ugly like this: ssh_ip_addresses="202.71.102.114 202.71.100.126 202.71.106.30 202.71.106.118 202.71.106.188 203.142.1.8 69.19.0.0/17 " and just say the hell with it, but I'd like to write elegant code... TIA, beno