Re: combining macro with interface modifiers in pf.conf

2020-01-25 Thread Paul de Weerd
Hi Philipp, On Sat, Jan 25, 2020 at 12:06:49PM +0100, Philipp Buehler wrote: | | Hey Paul, | | Am 25.01.2020 11:43 schrieb Paul de Weerd: | > block in on $IntIF inet proto { tcp, udp } from $IntIF:network to ! | > $IntIF:0 port domain | > block in on $IntIF inet6 proto { tcp, udp } from

Re: combining macro with interface modifiers in pf.conf

2020-01-25 Thread Philipp Buehler
Hey Paul, Am 25.01.2020 11:43 schrieb Paul de Weerd: block in on $IntIF inet proto { tcp, udp } from $IntIF:network to ! $IntIF:0 port domain block in on $IntIF inet6 proto { tcp, udp } from $IntIF:network to ! $IntIF:0 port domain I just tested this with "IntIF=vio0" and works on

combining macro with interface modifiers in pf.conf

2020-01-25 Thread Paul de Weerd
Hi all, I'm rewriting some pf.conf rulesets and thought to use interface modifiers to make them more generic. Here's an example of what I came up with: block in on $IntIF inet proto { tcp, udp } from $IntIF:network to ! $IntIF:0 port domain block in on $IntIF inet6 proto { tcp, udp } from