On 04/19/2013 06:53 PM, Tom Eastep wrote: > On 4/19/13 6:48 PM, "Dash Four" <mr.dash.f...@googlemail.com> wrote: > >> >>>> OK, I'll get on it, but before that I need to ask whether you have the >>>> "magical" NFACCT keyword for me to use after the ";" symbol (i.e. >>>> "INLINE ; NFACCT(all)" to place the nfacct match as well as include >>>> nfacct executable statements to create that object)? >>>> >>> >>> There is none -- everything after ';' is up to you. >>> >> Damn! Is there a chance to add this or implement something similar? > > No. INLINE is a hack to allow raw ip[6]tables commands to be integrated > during the compile phase. But it are just that -- raw. It is integrated > with the optimizer but that's about it. >
It is a simple change, however, to automatically record nfacct object names when transforming each rule into the internal form. Will be in the next version. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Precog is a next-generation analytics platform capable of advanced analytics on semi-structured data. The platform includes APIs for building apps and a phenomenal toolset for data science. Developers can use our toolset for easy data analysis & visualization. Get a free account! http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________ Shorewall-devel mailing list Shorewall-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-devel
