On 3/2/2014 10:40 AM, Roberto C. Sánchez wrote: > On Sun, Mar 02, 2014 at 10:09:27AM -0800, Tom Eastep wrote: >> >> What to do? I'm leaning toward treating the stoppedrules file as if >> ADMINISABSENTMINDED=Yes. Recall that if there are any entries in >> routestopped, then stoppedrules is not processed. That way, we can >> restore the documented ADMINISABSENTMINDED=No behavior for existing >> routestopped users and still make stoppedrules work correctly. >> > Tom, > > If I understand what you are saying, then placing anything in > stoppedrules will result in effectively forcing behavior equivalent to > ADMINISABSENTMINDED=Yes (regardless of how it is set in shorewall.conf). > If there is nothing in stoppedrules (or no stopped rules file at all) > then the setting of ADMINISABSENTMINDED in shorewall.conf will be in > effect. > > I am of the opinion that this is the right approach. >
Thanks Roberto -- you have correctly understood my proposal. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce. With Perforce, you get hassle-free workflows. Merge that actually works. Faster operations. Version large binaries. Built-in WAN optimization and the freedom to use Git, Perforce or both. Make the move to Perforce. http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
