Tom Eastep wrote:
> I would have written the above as:
> 
> crp   eth2:172.23.0.0/18,172.31.201.0/24      ipsec
> crp   eth3:172.23.0.0/18,172.31.201.0/24      ipsec
> 
> Which can be replaced with:
> 
> BEGIN PERL
> 
> for my $interface ( split /,/, $ENV{NET} ) {
>     shorewall "crp $interface:172.23.0.0/18,172.31.201.0/24 ipsec"
> }
> 
> END PERL
> 
> Note that variables set in /etc/shorewall/params are passed to the
> Shorewall-perl compiler via the environment.

Thanks, Tom.

This is strong and universal solution. So actually in hosts file is absolutely 
no need for new syntax. Ockham's Razor is always better. :)

Best regards

Andrzej Odyniec
Warsaw, Poland

------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to