A nice-to-have feature in nft would be the ability to use include directories that contain rule files. The use case would be support for services dropping their custom configuration files into a directory, allowing a more modular firewall configuration.
This is a proof-of-concept patch -- I'm not very familiar with nftables code base and conventions. Ismo Puustinen (1): scanner: add support for include directories src/main.c | 4 ++-- src/scanner.l | 73 +++++++++++++++++++++++++++++++++++++++++++++++------------ 2 files changed, 61 insertions(+), 16 deletions(-) -- 2.5.0 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
