Andrzej Odyniec wrote: > Here is a question: is there option to enable possibility of write zone name > instead interface name in any rules file for automatically duplication rules > for all interfaces in zone (or other method of groupping interfaces)? Or > maybe > exist other method to direct records about one interface automatically to > another?
I'll think about the notion of an 'interface group' -- I won't use zone names. Zones are security objects and should not be used for specifying packet rewriting. If I could design Shorewall over again, I wouldn't even have DNAT and REDIRECT rules in the rules file but would rather have a separate file for specifying DNAT/REDIRECT. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
