Re: include files in pf.conf

2008-03-19 Thread Paul de Weerd
On Mon, Mar 17, 2008 at 01:49:13PM +0100, Reyk Floeter wrote:
| On Mon, Mar 17, 2008 at 01:31:47PM +0100, Arjen Van Drie wrote:
|  Hi,
|  
|  
|  searching on the Internet gave me no clear answer: is there a way to
|  include other config files in pf.conf, like
|  
|  
| 
| the internet is for... anyway, sometimes the manpage gives a good
| answer, just look at pf.conf(5):
| 
| ---snip---
|  Additional configuration files can be included with the include keyword,
|  for example:
| 
|include /etc/pf/sub.filter.conf
| ---snap---
| 
| of course, you can also search the internet via
| http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf
| 
|  # /etc/pf.conf
|  
|  
|  Include /etc/pf.interfaces
|  
|  Include /etc/pf.natrules
|  
| 
| use lowercase letters and quotes...
| 
| include /etc/pf.interfaces

This seems to miss from the BNF spec.

Index: pf.conf.5
===
RCS file: /cvs/src/share/man/man5/pf.conf.5,v
retrieving revision 1.393
diff -u -r1.393 pf.conf.5
--- pf.conf.5   11 Feb 2008 07:46:32 -  1.393
+++ pf.conf.5   19 Mar 2008 19:09:50 -
@@ -2962,6 +2962,8 @@
 upperlimit-sc  = upperlimit sc-spec
 sc-spec= ( bandwidth-spec |
  ( bandwidth-spec number bandwidth-spec ) )
+
+include= include filename
 .Ed
 .Sh FILES
 .Bl -tag -width /etc/protocols -compact


Cheers,

Paul 'WEiRD' de Weerd

-- 
[++-]+++.+++[---].+++[+
+++-].++[-]+.--.[-]
 http://www.weirdnet.nl/ 



Re: include files in pf.conf

2008-03-17 Thread Peter N. M. Hansteen
Arjen Van Drie [EMAIL PROTECTED] writes:

 searching on the Internet gave me no clear answer: is there a way to
 include other config files in pf.conf, like

you can load anchors from separate files, see pf.conf(5) 

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: include files in pf.conf

2008-03-17 Thread Stuart Henderson
On 2008-03-17, Arjen Van Drie [EMAIL PROTECTED] wrote:
 searching on the Internet gave me no clear answer: is there a way to
 include other config files in pf.conf, like

Support has been added for 4.3.



Re: include files in pf.conf

2008-03-17 Thread Reyk Floeter
On Mon, Mar 17, 2008 at 01:31:47PM +0100, Arjen Van Drie wrote:
 Hi,
 
 
 searching on the Internet gave me no clear answer: is there a way to
 include other config files in pf.conf, like
 
 

the internet is for... anyway, sometimes the manpage gives a good
answer, just look at pf.conf(5):

---snip---
 Additional configuration files can be included with the include keyword,
 for example:

   include /etc/pf/sub.filter.conf
---snap---

of course, you can also search the internet via
http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf

 # /etc/pf.conf
 
 
 Include /etc/pf.interfaces
 
 Include /etc/pf.natrules
 

use lowercase letters and quotes...

include /etc/pf.interfaces

 
 etc...
 
 
 I expect to have many rules, so I'd like to split them accross multiple
 files.
 
 
 Thanks,
 
 Arjen
 

reyk



Re: include files in pf.conf

2008-03-17 Thread Arjen Van Drie
Reyk Floeter wrote:

 On Mon, Mar 17, 2008 at 01:31:47PM +0100, Arjen Van Drie wrote:
   
 Hi,


 searching on the Internet gave me no clear answer: is there a way to
 include other config files in pf.conf, like


 

 the internet is for... anyway, sometimes the manpage gives a good
 answer, just look at pf.conf(5):
   
The manpage was the first place I looked (so obvious I didn't even
mention it): in mine (OpenBSD 4.2) is no such text. I think that Stuart
Henderson gave me the correct answer by stating that support for include
directives is in 4.3.

Thanks,

Arjen.