-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 06/06/2017 11:34 PM, Jaryn Znosa wrote: > Matt: As Tom explained, we need variable that is expanded at > run-time (so I can't use /etc/shorewall/params). > > Tom: We need dynamic address and port rules, because those values > are stored in the database and can be changed over time from our > web UI. What solution do you suggest? Can we for example write a > compile extension script for such a functionality? >
You can provide a 'start' extension script that inserts the appropriate iptables rule(s). - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJZOC4LAAoJEJbms/JCOk0Q7o0QAJ5WnyKus/jt3Q3zPLBs2qM5 HQDhVGXte3XlbUUYYvhNXSSe+YylbhGt810/9qu/tGQxnEKYuv/DSYDjB4y07IhH mfW8tHPd6AJ7/TYDzMO3cT/WVqiJWjvgQQf7MWJXuZucGwOVYmEGdnejAlTo5IWZ fvZNteRjn/RYARp7ujrWYN0CB1LmrXdrDAOVP3so2m/EMHtCXKDrlZIC7xPTXE7k YDI0tGnTM74Aeq4Sm8YZq1ZSXEQkO92WSjS6Sd7Ve3Ndm9+yYYOpUUsBpG+ZplY+ ol/JxdaCWPoFB9GXeOsU12WU0fbSh0Y7rKSU5SAIR84QOVpniYrI22hGZ2232kMT oDJ9p9CdYATlMsvgryKWze+EIJzIV6C/mp1q+fPe06jOG6U5SQ/3OTOHQsmh2Osn 6MwYKwN9lwQc8n6z7dX1ZgJVeN8vFPBnxKmEy9yBXgUzh3YfOpJq5uhUYTw2OeLA hq9fMzv/z9d72/dCGPftWfo6EXn/eWxxbj5IlBSw26WPXGsJdKafA/NfUae3ltf2 4DpETKooiF5f+uVnvMMdRvgA9xUKnIv6NoNlq16D+DfRf8nRc+jttZGNU2bUk6gX GBvIIUx5IsdabhfQ+ptj7fR7tNpa50lUyVppO9OS5LX7WJyaIbYmeu++SUXWftqP du+pkF54mM//kr9YiJAF =xZPy -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
