I wanted to test the "new" pf with support for hot-pluggable devices
and stumbled over the following issue:

## Version
 [EMAIL PROTECTED] cat /etc/motd
 OpenBSD 3.4-current (FLASHBANG) #20: Mon Jan  5 18:54:07 CET 2004

## pcmcia wireless NIC not plugged in :-)
 [EMAIL PROTECTED] ifconfig wi0
 wi0: no such interface

## Variant 1 - Everything fine here.
 [EMAIL PROTECTED] cat pf1.conf
 # pf1.conf
 ext = "fxp0"
 wi0 = "wi0"
 pass in quick log on $ext inet proto icmp from any to ($ext) icmp-type 8 code 0
 pass in quick log on $wi0 inet proto icmp from any to ($wi0) icmp-type 8 code 0

 [EMAIL PROTECTED] pfctl -v -n -f pf1.conf
 ext = "fxp0"
 wi0 = "wi0"
 pass in log quick on fxp0 inet proto icmp from any to (fxp0) icmp-type echoreq code 0
 pass in log quick on wi0 inet proto icmp from any to (wi0) icmp-type echoreq code 0


## Variant 2 - I'm lazy and want to group interfaces. Hmm, doesn't work.
 [EMAIL PROTECTED] cat pf2.conf
 # pf2.conf
 ext = "fxp0"
 wi0 = "wi0"
 allif = "{" $ext $wi0 "}"
 pass in quick log on $allif inet proto icmp from any to ($allif) icmp-type 8 code 0

 [EMAIL PROTECTED] pfctl -v -n -f pf2.conf
 ext = "fxp0"
 wi0 = "wi0"
 allif = "{ fxp0 wi0 }"
 pf2.conf:5: syntax error


## Variant 3 - Next try without ( ).
 [EMAIL PROTECTED] cat pf3.conf
 # pf3.conf
 ext = "fxp0"
 wi0 = "wi0"
 allif = "{" $ext $wi0 "}"
 pass in quick log on $allif inet proto icmp from any to $allif icmp-type 8 code 0

 [EMAIL PROTECTED] pfctl -v -n -f pf3.conf
 ext = "fxp0"
 wi0 = "wi0"
 allif = "{ fxp0 wi0 }"
 no IP address found for wi0
 pf3.conf:5: could not parse host specification

Sorry if this behaviour is described in the docs, maybe I just didn't
see it (Current is a fast moving target :-).

regards,
Oliver

Reply via email to