pfdoc.rb - the sexiest way to document your pf.conf (openbsd packet filter)
Posted by Ruy Rocha on March 23rd, 2008pfdoc.rb is a parser which makes your pf.conf looks very sexy by writing an elegant documentation (from here just called as pfdoc).
First scenario: you have a medium to large client with almost 900 lines of conf. Everything works fine even with your quick fixes, redundant rules, etc. Someday your boss (who you love) request a paper with your firewall rules for some audit and you’ll have two hours to delivery entire work… (need I say more?)
Second scenario: you have all your macros, tables, queues, rules or anything else, commented and described, line per line, all what you did, how traffic works, wich services are (dis)allowed, what ip’s are blocked, etc.
If all you want is bring your work to the world in a pretty (sexy and stylish) way pfdoc will fit your needs.
pfdoc is entire written in Ruby; design (final .html, generated when you pfdocsify {WTF?!} your pf.conf) by pingfoo (LoadFoO).
Only MACROS are recognized at this time. You can view a sample here.
Recent Comments