On Fri, Mar 17, 2017, at 11:43 AM, Tom Eastep wrote:
> No. YOU CAN'T USE THE PARAMS FILE FOR WHAT YOU ARE TRYING TO DO
> because it is only processed at compile time. That's why I created the
> &<interface> address variable.
I currently reference the
$MY_EXT_IP
variable repeatedly through my params file.
e.g.,
MY_SERVER_1_IP=$MY_EXT_IP
MY_SERVER_2_IP=$MY_EXT_IP
which make my rules quite readable for me, using "$MY_SERVER_1_IP" &
"$MY_SERVER_2_IP",
and it's easily changed in one place if I decide to move a server etc.
Sounds like &/% won't do the trick for me, and I should think some more about
what's most flexible for me, perhaps refererring back to Simon's
> Otherwise there's the less elegant way where you have a params-base file, and
> you script basically does :
> echo ${something} > params
> cat params-base >> params
> shorewall restart
DT
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users