Hello,

I'm having some grief with the macro parser of pf and wondering if
I've either done something dumb or am expecting too much from it.

I have, for the sake of simplicity the following ruleset:

place1 = "10.0.0.1"
place2 = "10.0.0.2"
all_places = "{" $place1 $place2 "}"
pass all

That loads in to pf fine.

however if I make the places be subnets, eg:

place1 = "10.0.0.1/32"
place2 = "10.0.0.2/32"
all_places = "{" $place1 $place2 "}"
pass all

I get:

openbsd# pfctl -n -f ./testpf.conf  
./testpf.conf:3: syntax error

It'd be really useful if I could expand macros with subnets in, save
duplicating IP blocks all over the ruleset. Is this a bug with me of
pfctl?

Thanks.

-- 
Ben. <ben @ mumble . org . uk>

Reply via email to