Hi,

I am a very happy user of PF, so first of all, thanks for the wonderful software!

I do have a feature request though; consider the following example from the man page:

 ips = "{ 1.2.3.4, 1.2.3.5 }"
                 pass in proto tcp from any to $ips \
                       port > 1023 label "$dstaddr:$dstport"

I love the list feature: it allows me to use the same ruleset over multiple machines, doing the customization in the lists. However, if you happen to have an empty list:

  ips = "{ }"

then you get a parse error. It would be very useful if this would just work. The expected behavior would the be that pf not generate any rules at all in this case (one rule for every ip in the list = 0 rules).

Best regards,
Sebastiaan van Erk

Reply via email to