Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 2 Dec 2004 21:13:32 +0000
From:      Daniela <dgw@liwest.at>
To:        "Reinhard Haller" <reinhard.haller@interactive-net.de>, <freebsd-ipfw@freebsd.org>
Subject:   Re: preprocessor questions
Message-ID:  <200412022113.32652.dgw@liwest.at>
In-Reply-To: <s1af4af6.004@fs-inter.interactive.de>
References:  <s1af4af6.004@fs-inter.interactive.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday 02 December 2004 16:03, Reinhard Haller wrote:
> Hi,
>
> I'm using cpp as preprocessor for my firewall rules.
>
> I'd problems specifying macros.
>
> #define RULE __LINE__
> #define ldap 389
> #define ldaps 636
> #define all_ldap 389,636
>
> sample1:
> add RULE pass tcp from 192.168.0.0/24 to any ldap,ldaps  setup
> keep-state
>
> sample2:
> add RULE pass tcp from 192.168.0.0/24 to any all_ldap  setup
> keep-state
>
> Sample 1 produces an error, while sample 2 is working. Why?

Are you using IPFW 2? If no, the problem is that the preprocessor adds leading 
and trailing spaces to the macro expansions. In C, this doesn't matter, but 
IPFW doesn't like it. If you absolutely need to keep it this way, use IPFW 2.
Or modify the preprocessor.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200412022113.32652.dgw>