-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi Jeff,
I seem to remember something about IPset or iptables having troubles with rules where both source and destination are groups. However, I think this problem doesn't exist anymore. I'm still trying to figure out what's wrong with that config that fails to load (for me it takes forever to load, which complicates things), I'll try this on that test VM and let you know. On 12/14/2015 08:14 PM, Jeff B wrote: > set firewall name WANtoLAN rule 10 description 'Allow SMTPS from Google to > our MTA' > set firewall name WANtoLAN rule 10 destination port '587' > set firewall name WANtoLAN rule 10 protocol 'tcp' > set firewall name WANtoLAN rule 10 source group network-group nets-google > set firewall name WANtoLAN rule 10 destination group address-group hosts-smtp - -- #!/usr/bin/env perl @a=split(//, "daniil @ baturin . org" );# Daniil Baturin @b=split(//,q/Px%!+o0Q6lh*7dp$.@8#%|y{/);while($i<24){$_.= chr((ord(@b[$i])-ord(@a[$i])+62)%94+32);$i++};print"$_\n"# -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWbtZrAAoJEEcm35UR4K8fdDkP/39zTcdYQ35X7RO2QiQuW2vR QK838thCdTt/NEM8rB2reeCZZ6bvcl8iKhGwuqDaCcsFYLg5LOu+QpGfToZPZLlM /F/FDHKtconKG2B/oZH1YvX4UTcvjX+LyOUZObvLQPKi4ZGjokEG63H9MbJF6MyJ v9YiW3G2vbklAB4MCeUWr1K6YNr4mdmXUwvcJ46dFh/fOvRggWl0hrOufee6eata 8IGk5ZL2FS5XKquKf+PvW6FJpOyVdMMjhZ13P1+xjH3y9hTzt0GlQG2rT9Bv7eD4 ne3JUQ5Cv63Azag2OuVf3vLnJKXyWwQKB28BVPZviE3T9cdyqgbQnpMGxAJCECYb +s0EL23G/WgZhS9UZD1JHoCeBwGctId9Cg+096nfxlamq8957EbGtq5Yn9gScFvj 6SjAjQ+kuvqTx4OtPgIFOVbmUPab+jmQsdZCBUDx1JlXa+FagZP8cTulE8kZYoya zQY1jMsV/ABcryLNNCf1XF0bLwy9yA32LecOawSXmf8mqmKJ0MTRQ8pz73aX07JQ oUV48wB6zSswb390k38qi08kQJvXlPKNHjXTes5oruFNqET85dTvzISXQ02XOzO/ W3ksp8Q5GNeu1XyhfUz4iHc5rFgETQfv/jBn2wN87OVYdyqgYV9/f3OJrvAEZ5/J Z6VJxjUzMBY9hmAH3/8c =UrYk -----END PGP SIGNATURE----- _______________________________________________ Vyos-developers mailing list Vyos-developers@lists.tuxis.nl https://lists.tuxis.nl/listinfo/vyos-developers