I couldn't find this issue in any of the documentation I could find, so
I thought I'd ask here.

Macros in pf can be defined recursively, but it doesn't seem to work
when the macros that are being expanded are CIDR-style network
specifications.

For instance, while this works:

wibble = { 192.168.1/24 192.168.4/24 }

This does not (fails with a syntax error when trying to load):

muh = "192.168.1/24"
fuh = "192.168.4/24"
wibble = "{" $muh $fuh "}"

I've tried it with commas, with one macro and one literal, with
non-abbreviated style (i.e. 192.168.1.0/24), etc., but nothing seems to
work.

Recursive macros work normally with individual hosts, but not netblocks.

Is this a feature or a bug?

/a

-- 
Aaron Spanik
Senior Unix Systems Administrator, Computing Services
Acadia University  Wolfville, NS  Canada  B4P 2R6
phone: (902) 585-1121  fax: (902) 585-1066

Reply via email to