On Mon, May 04, 2009 at 04:14:45PM -0400, Mark Shroyer wrote: > On Mon, May 04, 2009 at 04:46:16PM -0300, Gonzalo Lionel Rodriguez wrote: > > jaja OMG... i love PF and OpenBSD. > > > > 2009/5/4 Jason Dixon <ja...@dixongroup.net>: > > > LOL, you ain't seen nothing yet. Look at the "extended version" he just > > > sent out. :) > > To be fair, I've seen some pretty horrid pf.conf files, too. (Although > I certainly prefer it over iptables in most cases.)
Indeed. I clawed my eyes out this weekend on a friend's pf.conf (hi Kevin :) while trying to diagnose some relayd problems. At least pf syntax lends itself to logical separation and organization. -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net/