#!/bin/sh
# VIPF
# Version 1.0 (c) Roman Shramko, Jan, 31 2006
 
PF_CONF=/etc/pf.conf.local
CHECK_PFCONF="/sbin/pfctl -nf "
RELOAD_PF="/sbin/pfctl -f "
 
if [ -z $EDITOR ] ; then
    echo 'You must set $EDITOR variable'
    exit
fi
 <span class="fullpost">
# Create copy of the config
TMP_CONFIG=`/usr/bin/mktemp -q /tmp/pf.conf.XXXXXX` \
        && chmod 600 $TMP_CONFIG
trap 'rm -f ${TMP_CONFIG}; exit' 0 1 2 3 15
 
cp $PF_CONF $TMP_CONFIG
if [ $? -ne "0" ] ; then
        echo "Error copying $PF_CONF"
        exit 1
fi
while true ; do
        # Edit config file
        # EDITOR is external variable
        $EDITOR $TMP_CONFIG
 
        # Compare files
        diff $PF_CONF $TMP_CONFIG 2>&1 > /dev/null
        if [ $? -eq 0 ] ; then
                echo "Config wasn't changed"
                exit 0
        fi
 
        # Config was changed
        # Check it for error
        $CHECK_PFCONF $TMP_CONFIG 2>&1 > /dev/null
 
        if [ $? -eq 0 ] ; then
                # config is ok
                # copy tmp config
                cp $TMP_CONFIG $PF_CONF
                # reload pf rules
                $RELOAD_PF $PF_CONF
                exit 0
        else
                # Bad config
                echo "Press \"Enter\" to continue editing or \"Ctrl-C\" to exit"
                stty -echo
                read  tmp
                stty echo
        fi
done