After converting an existing ipf rule set to PF, I've found one bit of the interface I'd like to see tweaked.

One of the big wins with PF in my mind is the Host/Network Aliases function. It allowed me to simplify my rule set greatly. My Aliases however are now more difficult to deal with as they are just a list of ips/networks and an overall name, with no identifiers for the individual entries. An example would be a list of Employees allowed basic remote access. I use a Host Alias list such that I can use one rule to give them all access. When manipulating the raw ipf conf, I would comment each entry to associate it with a specific employee, I can't do that now.

Would it be possible to extend the Alias interface to allow comments for each item within an Alias?

Joshua Coombs

Reply via email to