NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: NPF and multiple group entrance



In article <20160221221105.GA8057%laura.ws.pu.ru@localhost>,
Dima Veselov  <kab00m%lich.phys.spbu.ru@localhost> wrote:
>Hello!
>
>I migrate from ipfilter to npf due to ipf issues in 7.0, but have
>a question:
>
>Is there a possibility to make two entrance for one group?
>
>for example if I have:
>
>$ext_if = {inet4(vlan112), inet4(vlan113)};
>group "external" on $ext_if {
>	<rules here>
>}
>
>the result will be:
>
># npfctl show
>group "external" on vlan112 
>	pass stateful out final all 
>	...
>
>As you can see - I can't find a way to make a group working for few interfaces
>at once, but I don't want to repeat group every time, having two
>external interfaces and several internal.
>
>Thanks in advance!

Sure we can add some syntax to help with this... Any ideas?

	use group "name"

christos



Home | Main Index | Thread Index | Old Index