Hello,

Is it possible to specify multiple zones or define virtual zones to get 
better readibility?

e.g. following config (all can not be used because there exist more than 
the 3 zones):
SSH(ACCEPT)     loc             $FW
SSH(ACCEPT)     loc             dmz
SSH(ACCEPT)     loc             net

# Should be written as:
SSH(ACCEPT)     loc             $FW,dmz,net

# Or virtual zone:
fw-dmz-net: $FW,dmz,net
SSH(ACCEPT)     loc             fw-dmz-net

# or subtract it (% means subtract, just for illustration):
SSH(ACCEPT)     loc             all%dmz2%dmz3

# so can look like for generating the whole n x m product:
SSH(ACCEPT)     loc,dmz4             all%dmz2%dmz3

Any plan to implement such a feature if it is not possible?

Thnx.

Ciao,
Gerhard


------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to