On 2004-07-28, at 01.20, [EMAIL PROTECTED] wrote:

Johan Allard writes:
Hi all,
I've just uploaded version 0.3 of pfw and I've added Scrub and Table definitions to the interface so the only 2 major things lacking now is options/settings and queues...

Johan; PFW is a marvelous effort, congrats. Just one thing; is preservation of comments a near-term milestone? Comments are quite important in large installations. -William Ross


Thanks William,

With the comments. The parseing problem I have is this:

# The following rule blocks all
block log all

pass all
# This rule permits all

And I sometimes add ruleblocks in my pf.conf like this:

# ------
# antispoof rules
block in quick  on $ext_if from $ext_if to any
# ------

and I guess that this is just a onetime problem after I picked they way i want to write comments in pfw. I like the idea of not having rule comments like Firewall-1 and instead having whole lines above the current rule. Maybe both like:

#
# This commentblock will end up on it's own line above the block rule
#
block in all

pass quick on lo0 # and this comment will be added to the actual rule

Comments (on the comments) :-)

//johan

Reply via email to