Comments on: FreeBSD/PF include command hack http://blog.xbsd.org/2006/11/04/freebsdpf-include-command-hack/ (Mostly) Technical Blog Wed, 07 Jan 2009 10:47:54 +0000 http://wordpress.org/?v=2.7 hourly 1 By: Travis H. http://blog.xbsd.org/2006/11/04/freebsdpf-include-command-hack/comment-page-1/#comment-2393 Travis H. Fri, 12 Jan 2007 10:30:10 +0000 http://blog.xbsd.org/2006/11/04/freebsdpf-include-command-hack/#comment-2393 I have a script called "preprocess" I recently posted to the pf list; check for it on my website or in the archives around today if you want to get ahold of it. cpp tends to be somewhat specific to C, and expects C syntax more-or-less. preprocess is freeform, line-based, and you can configure the comment character, the if statement, implicit end-if's, and so on. I have a script called “preprocess” I recently posted to the pf list; check for it on my
website or in the archives around today if you want to get ahold of it.

cpp tends to be somewhat specific to C, and expects C syntax more-or-less.

preprocess is freeform, line-based, and you can configure the comment character,
the if statement, implicit end-if’s, and so on.

]]> By: Henrik Brix Andersen http://blog.xbsd.org/2006/11/04/freebsdpf-include-command-hack/comment-page-1/#comment-1010 Henrik Brix Andersen Sat, 04 Nov 2006 10:22:13 +0000 http://blog.xbsd.org/2006/11/04/freebsdpf-include-command-hack/#comment-1010 Another shortcoming of the pfctl(8) parser is the missing ability to parse tables with embedded comments: table persist { 192.168.0.0/24, # Foo 192.168.1.0/24, # Bar 192.168.2.0/24, # Baz } The above syntax is illegal and so have all other table-with-embedded-comment syntax constructions I have tried been... The only solution seems to be to load the table definition from an external file, which isn't very flexible. Another shortcoming of the pfctl(8) parser is the missing ability to parse tables with embedded comments:

table persist {

192.168.0.0/24, # Foo
192.168.1.0/24, # Bar
192.168.2.0/24, # Baz
}

The above syntax is illegal and so have all other table-with-embedded-comment syntax constructions I have tried been…

The only solution seems to be to load the table definition from an external file, which isn’t very flexible.

]]>