NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

NPF and multiple group entrance



Hello!

I migrate from ipfilter to npf due to ipf issues in 7.0, but have
a question:

Is there a possibility to make two entrance for one group?

for example if I have:

$ext_if = {inet4(vlan112), inet4(vlan113)};
group "external" on $ext_if {
	<rules here>
}

the result will be:

# npfctl show
group "external" on vlan112 
	pass stateful out final all 
	...

As you can see - I can't find a way to make a group working for few interfaces
at once, but I don't want to repeat group every time, having two external interfaces and several internal.

Thanks in advance!

-- 
Sincerely yours


Home | Main Index | Thread Index | Old Index