1CDIST-TYPE__PF_APPLY_ANCHOR(7) cdist CDIST-TYPE__PF_APPLY_ANCHOR(7)
2
3
4
6 cdist-type__pf_apply_anchor - Apply a pf(4) anchor on $__target_host
7
9 This type is used on *BSD systems to manage anchors for the pf fire‐
10 wall.
11
12 Notice this type does not take care of copying the ruleset, that must
13 be done by the user with, e.g. __file.
14
16 anchor_name
17 The name of the anchor to apply. If not set, ${__object_id} is
18 used. This type requires /etc/pf.d/${anchor_name} to exist on
19 $__target_host.
20
22 # Copy anchor file to ${__target_host}
23 __file "/etc/pf.d/80_dns" --source - <<EOF
24 # Managed remotely, changes will be lost
25
26 pass quick proto {tcp,udp} from any to any port domain
27 EOF
28
29 # Apply the anchor
30 require="__file/etc/pf.d/80_dns" __pf_apply_anchor 80_dns
31 # This is roughly equivalent to:
32 # pfctl -a "${anchor_name}" -f "/etc/pf.d/${anchor_name}"
33
35 pf(4)
36
38 Evilham <contact--@--evilham.com> Kamila Součková <‐
39 coding--@--kamila.is> Jake Guffey <jake.guffey--@--eprotex.com>
40
42 Copyright (C) 2020 Evilham. Copyright (C) 2016 Kamila Součková. Copy‐
43 right (C) 2012 Jake Guffey. You can redistribute it and/or modify it
44 under the terms of the GNU General Public License as published by the
45 Free Software Foundation, either version 3 of the License, or (at your
46 option) any later version.
47
49 ungleich GmbH 2020
50
51
52
53
546.9.6 Apr 20, 2021 CDIST-TYPE__PF_APPLY_ANCHOR(7)