On 10/4/10 3:12 PM, Mr Dash Four wrote: > >> Attached is a patch against /usr/share/shorewall/Shorewall/Chains.pm. >> > Is the syntax I used correct (hence why I attached the 'long > description' - for your own benefit)? > > I am particularly interested to know whether the double exclusion syntax > is correct, i.e. !+port-map[dst] !+ip-map[dst] = !+[ip-map,port-map], or > should I use +[!ip-map,!port-map]?
Depends on what you want. !+[ip-map,port-map] means that the packet does not match both sets (but it may match one of the two sets). +[!ip-map,!port-map] means that the packet does not match either set. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today. http://p.sf.net/sfu/beautyoftheweb
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
