On Saturday 19 May 2012 17:42:31 Tom Eastep wrote:
> On 05/19/2012 09:23 AM, Tom Eastep wrote:
> > On 05/19/2012 08:58 AM, Steven Jan Springl wrote:
> >> On Friday 18 May 2012 01:18:44 Tom Eastep wrote:
> >>> Example - Drop email from Anonymous Proxies and Satellite Providers:
> >>>
> >>> #ACTION SOURCE DEST PROTO DEST
> >>> # PORT(S)
> >>> DROP:info net:^A1,A2 dmz tcp 25
> >>
> >> Tom
> >>
> >> Specifying two country codes as in the above example produces the
> >> following
> >> error message:
> >>
> >> ERROR: Unknown Host (A2) /etc/shorewall2/rules (line 182)
> >
> > <Tom hits forehead with palm>
> >
> > Clearly the country list needs to be delimited. The attached patch
> > allows a single country code to be entered as ^cc and a list as
> > ^[cc,...].
>
> Updated release notes text is:
>
> 2) With some misgivings, this release adds support for the geoip match
> feature available in xtables-addons. Geoip allows matching of the
> source or destination IP address by ISO 3661 country codes.
>
> The support is implemented in the form of extended syntax in the
> SOURCE and DEST columns.
>
> To specify a single country code, prefix it with a caret ('^')
> (e.g., ^A1).
>
> To specify multiple country codes, enter them as a
> comma-separated list enclosed in square brackets ('[...]') prefixed
> by a caret ('^') (e.g., ^[A1,A2]).
>
> Example - Drop email from Anonymous Proxies and Satellite Providers:
>
> #ACTION SOURCE DEST PROTO DEST
> # PORT(S)
> DROP:info net:^[A1,A2] dmz tcp 25
>
> A listing of two-character country codes is available at
> http://www.shorewall.net/ISO-3661.html.
>
> -Tom
Tom
Confirmed, the patch corrects the issue.
Thanks.
Steven.
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
