Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

How do we make PF load a List or Table content from a File...?

Posted on 2008-10-08
4
Medium Priority
?
450 Views
Last Modified: 2013-11-22
Hi Team
I have a FreeBSD 6.1 acting as a Gateway and Firewall using PF. My requirement is that I have a long list of end user IPs that should be allowed access to Internet and specific ports. I have currently done it using Table which I have defined it like below

Table <allowlist> { IP1 IP2 IP3 IP4 IP5 }

I then call the Table in the rules. However, I have close to about 60 IPs to define in the list and feel it would be great if I could define a file like /etc/allowlist and add all the IPs one each on a line and call the File.
Do you think that's possible...?
0
Comment
Question by:Ruf
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 29

Accepted Solution

by:
TeRReF earned 500 total points
ID: 22667118
Yes, that is possible, something like:

           table <allowed> persist file "/etc/ips"
           allow on fxp0 from <allowed> to any

Where you have to change /etc/ips to your file and the rule to your specific situation
0
 
LVL 29

Expert Comment

by:TeRReF
ID: 22667121
Oh, of course these lines go into your pf.conf file...
0
 
LVL 1

Author Comment

by:Ruf
ID: 22697506
Perfect... That's exactly what I wanted TeRReF.... Thanks a lot...
0
 
LVL 29

Expert Comment

by:TeRReF
ID: 22697811
You're welcome :)
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In tuning file systems on the Solaris Operating System, changing some parameters of a file system usually destroys the data on it. For instance, changing the cache segment block size in the volume of a T3 requires that you delete the existing volu…
Using libpcap/Jpcap to capture and send packets on Solaris version (10/11) Library used: 1.      Libpcap (http://www.tcpdump.org) Version 1.2 2.      Jpcap(http://netresearch.ics.uci.edu/kfujii/Jpcap/doc/index.html) Version 0.6 Prerequisite: 1.      GCC …
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.
Suggested Courses

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question