From owner-freebsd-pf@FreeBSD.ORG  Thu Mar  1 15:23:13 2007
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: pf@freebsd.org
Delivered-To: freebsd-pf@FreeBSD.ORG
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 2A77816A520
	for <pf@freebsd.org>; Thu,  1 Mar 2007 15:23:13 +0000 (UTC)
	(envelope-from mcdouga9@daemon.egr.msu.edu)
Received: from daemon.egr.msu.edu (daemon.egr.msu.edu [35.9.44.65])
	by mx1.freebsd.org (Postfix) with ESMTP id 153C613C4A3
	for <pf@freebsd.org>; Thu,  1 Mar 2007 15:23:12 +0000 (UTC)
	(envelope-from mcdouga9@daemon.egr.msu.edu)
Received: by daemon.egr.msu.edu (Postfix, from userid 21281)
	id 5E5BF1CCB3; Thu,  1 Mar 2007 09:51:49 -0500 (EST)
Date: Thu, 1 Mar 2007 09:51:49 -0500
From: Adam McDougall <mcdouga9@egr.msu.edu>
To: pf@freebsd.org
Message-ID: <20070301145149.GB4354@egr.msu.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.13 (2006-08-11)
Cc: 
Subject: Require table definition if referenced by a rule?
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Mar 2007 15:23:13 -0000

Is there a way to make pfctl ensure that a table exists before allowing
any rule to refer to it?  For example, I found out I had a rule that 
references table <abc> but I had only defined a table called <abcd>, and didn't
realize I left off the d in the rule.  <abc> does not exist, so the rule had
no function.  I can understand that this behavior might be a desirable feature,
but I'm wondering if there is a way to make pfctl check.  Thanks.