Hello,
I'm having some grief with the macro parser of pf and wondering if
I've either done something dumb or am expecting too much from it.
I have, for the sake of simplicity the following ruleset:
place1 = "10.0.0.1"
place2 = "10.0.0.2"
all_places = "{" $place1 $place2 "}"
pass all
That loads in to pf fine.
however if I make the places be subnets, eg:
place1 = "10.0.0.1/32"
place2 = "10.0.0.2/32"
all_places = "{" $place1 $place2 "}"
pass all
I get:
openbsd# pfctl -n -f ./testpf.conf
./testpf.conf:3: syntax error
It'd be really useful if I could expand macros with subnets in, save
duplicating IP blocks all over the ruleset. Is this a bug with me of
pfctl?
Thanks.
--
Ben. <ben @ mumble . org . uk>