In large deployments of pf-pfsyn-carp firewalls it would be useful to maintain pf.conf with some form of archiving, version control, and auditing. Can anyone advise on a system?, especially one that has been tried and tested (SCCS?)...
I use and strongly recommend a system called Kara - basically an implementation of cvs with some neat backend stuff written especially for use with a wide deployment of many local and remote OBSD/PF firewalls. Easily adaptable for any off your config file needs.
More info is available at:
http://www.fernhilltec.com.au/~adrian/kara/kara.html
I have used it to maintain configs on about 8 different firewalls in 6 different states and love it.
Regards,
Tefol
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! hthttp://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
