[Shorewall-users] How-to? Multiple zone:ip-address in SOURCE or DEST column

[Marcelo Bello]

Hi,

Is there any way to have on one single line, something like this:

params:
MY_VAR=ZONE1:ip-add1,ip-add2,ZONE2:ip-add

rules:
ACCEPT $MY_VAR1 zone3

This syntax does not work currently

I could consider moving to the syntax:
ACCEPT {...} if using this kind of syntax can achive this, but my tests
indicate it cannot.

So:
1. Is it possible to do it currently? How?
2. If not, Tom, would you consider supporting it?

Happy Thanksgiving!

[Tom Eastep]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,
params: MY_VAR=ZONE1:ip-add1,ip-add2,ZONE2:ip-add
rules: ACCEPT $MY_VAR1 zone3
This syntax does not work currently
I could consider moving to the syntax: ACCEPT {...} if using this
kind of syntax can achive this, but my tests indicate it cannot.
So: 1. Is it possible to do it currently? How?

No.

2. If not, Tom, would you consider supporting it?

I would consider something like

ZONE1:(addr1,addr2,...),ZONE2:(addr3,addr4),...

- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
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=zhV2
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------