>From 5.5 and up it looks like bgpd macros are broken. ton...@obc2.rad$ cat bgpd.conf good="{ 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }" AS 65001 deny from any prefix { $good } ton...@obc2.rad$
On 5.4: ton...@obc2.rad$ bgpd -f bgpd.conf -n configuration OK ton...@obc2.rad$ On 5.5: ton...@obc0.rad$ bgpd -f bgpd.conf -nv good = "{ 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }" bgpd.conf:3: syntax error ton...@obc0.rad$ On 5.6 snapshot: tonsar@obc1$ uname -mrsv OpenBSD 5.6 GENERIC.MP#701 amd64 tonsar@obc1$ bgpd -f bgpd.conf -nv good = "{ 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }" bgpd.conf:3: syntax error tonsar@obc1$ Also, the example from bgpd.conf man page fails on 5.4-5.6. I haven't tested on 5.3 and lower. On 5.6 snapshot: tonsar@obc1$ uname -mrsv OpenBSD 5.6 GENERIC.MP#701 amd64 tonsar@obc1$ cat bgpd.conf-2 good="{ 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }" bad="{ 224.0.0.0/4 prefixlen >= 4, 240.0.0.0/4 prefixlen >= 4 }" ugly="{ 127.0.0.1/8, 169.254.0.0/16 }" # global configuration AS 65001 deny from any prefix { $good $bad $ugly } tonsar@obc1$ bgpd -f bgpd.conf-2 -nv good = "{ 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }" bad = "{ 224.0.0.0/4 prefixlen >= 4, 240.0.0.0/4 prefixlen >= 4 }" ugly = "{ 127.0.0.1/8, 169.254.0.0/16 }" bgpd.conf-2:6: syntax error tonsar@obc1$ Regards Tony