Der Tag war in Harburg noch nicht beendet, es ging am Nachmittag noch auf zum Ipf. Auf dem Gipfelplateau befinden sich mächtige vorgeschichtliche Befestigungsanlagen, die bereits in der Spätbronzezeit ab dem 12. Jahrhundert v. Chr. angelegt wurden. Heute dient die exponierte Lage der Hochebene als Flugplatz für Modellbauflieger. Die Menschen, die man am Horizont sieht, sind Pilot:innen mit Fernsteuerung und Segelfliegermodellen hoch oben in der Luft.

Flickr-Permalink /// Location | Print: on demand (10/10 available)

I have created a tool which uses #macro processing / expansion to generate #IPF #firewall #rulesets for my #illumos #OmniOS VMs and zones. It makes the wording and the ordering uniform.

The input is on the left side, while the output is on the right. Is this hinged?

I have a #firewall ruleset defined for all of my VMs, but it always bothered me that they didn’t share the same syntax, formatting, ordering, etc. I figured I could reduce the complexity and solve all of these inconsistencies by modularizing my firewall rules. Ideally, I wanted something like:

```
import enable_ssh_in
```

which would inject the corresponding rule fragment into the ruleset. Some modules would also need light post-processing such as filling in port numbers, selecting protocols, and similar adjustments.

Unfortunately, #IPF can’t handle rule imports, so the next best option is to pre-bake the full ruleset and hand the final result to IPF.

My first attempt was with m4, but the result was messy and triggered my #OCD. Then I tried doing it in #Python, and the outcome is much cleaner.

Now I can write a simple text file like: https://paste.omnios.org/?97e42d30483c83fb#DNE4ir94tFsVxiFmngBafVFQoYsHYVbJCGMx6JWBT1me
Feed it through my macro processor, and it generates this: https://paste.omnios.org/?5db469ba780c5f70#8jd9kiy4GDTcjTwQyQtWsLvWQ3YFEW7UYYuyZqfnDo8U

What do you think about this?

Terna Trust — Caring with Transparency 📊🏥

Under the Indigent Patient Fund (IPF), Terna Trust has supported hundreds of underprivileged patients with free or subsidized healthcare between January and August 2025.

We believe in accessible healthcare for all — no matter the background. 💙

#TernaTrust #IPF #HealthcareForAll #SocialImpact #NaviMumbai #TransparencyInCharity #CommunityCare

I’m using plenty of #Illumos zones, and their #IPF firewall rulesets are mostly similar, so modularization would be very helpful. Unfortunately, #IPF (the firewall in #Illumos) doesn’t support an import directive to include smaller rule fragments to build a complete ruleset.

I’m thinking about using a macro expansion tool to pre-bake the rulesets. I considered m4 and cpp, but maybe you know something better.

Ideally, I’d like to write something like this:

```
ENABLE_INBOUND(tcp, 687)
```

…and have it expand to:

```
pass in quick on $ext_if proto tcp from any to $my_IP port = 687 keep state
```

and something like:

ENABLE_SSH_IN

to insert the necessary rules (simple macro expansion).

What kind of (ideally POSIX) tool would you use for this kind of rule generation?

From our in-depth interview on "Stem Cell Therapy China - A Breakthrough for Pulmonary Fibrosis":

This clip focus on "China's Stem Cell Breakthrough Reversing Irreversible Lung Disease"

Full article: https://zurl.co/Nx9UK

Want to stay informed? Follow us for more short insights!

#StemCells #StemCellTherapy #IPF #LungDisease #PulmonaryFibrosis #MedicalTourismChina #ChinaMedicalTourism

A significant breakthrough from a Shanghai-based research team is offering new hope for IPF patients. A recent study published in eBioMedicine demonstrates how autologous stem cell therapy successfully reversed lung damage in clinical trial patients.

This highlights the incredible pace of medical innovation available in China.

Read our full analysis: https://zurl.co/RuQdo

#StemCellTherapy #PulmonaryFibrosis #IPF #MedicalInnovation #China #MedTech #MedicalTourismChina #HealthcareNews