for what it's worth, pfctl in -current parses this situation fine, but ipsecctl does not:
# cat cow.conf cow = 'moo' moo = $cow cow = '1234' moo = $cow cow = ' 1234 ' moo = $cow cow = '12a34' moo = $cow # ipsecctl -nvf ./cow.conf cow = "moo" moo = "moo" cow = "1234" ./cow.conf: 4: syntax error cow = " 1234 " ./cow.conf: 6: syntax error cow = "12a34" moo = "12a34" ipsecctl: Syntax error in config file: ipsec rules not loaded # pfctl -nvf ./cow.conf cow = "moo" moo = "moo" cow = "1234" moo = "1234" cow = " 1234 " moo = "1234" cow = "12a34" moo = "12a34" # i went on and tested '-nvf ./cow.conf' in each of: bgpd, ldapd, ldpd, ospfd, relayd, ripd, snmpd, smtpd, ypldap. they all errored out only exactly on lines 4 and 6 m4(1) seems to parse the file fine though. assuming these are all supposed to be consistent, is pfctl/m4 the way things should be, or are all these other things the way things should be? -- jared