>> Is it possible to use ipsets in the secmarks file? >> > > Yes. > Tested it, albeit very briefly, yesterday and it did seem to work - I will have a more thorough run-through later this week as I will be ready with the SELinux policies controlling all the traffic.
What I like about ipsets is that they are dynamic and can be changed 'on-the-fly' without the need to restart/reload Shorewall - an ipset could have one set of values/members now and completely different the next time - very handy for testing! ------------------------------------------------------------------------------ Start uncovering the many advantages of virtual appliances and start using them to simplify application deployment and accelerate your shift to cloud computing http://p.sf.net/sfu/novell-sfdev2dev _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
