| commit | ed49d0d9239f8328d3ccc1d153e22935ff0184d1 | |
| author | Faidon Liambotis <paravoid@debian.org> | |
| Thu, 13 Jun 2013 08:35:34 +0000 (13 11:35 +0300) | ||
| committer | Max Kellermann <max@duempel.org> | |
| Mon, 1 Jul 2013 18:50:20 +0000 (1 20:50 +0200) | ||
| tree | 03f8425e2c374c8ff5fae1e13a6ddd93ea7c6c68 | treesnapshot (tar.gz zip) |
| parent | 654f2f085562c90d777b0e0b6f83c5bb7c6d7f9b | commitdiff |
Automatically apply @ipfilter on dual-stack config
Add support for ferm to automatically apply @ipfilter on constructs
such as:
domain (ip ip6) chain INPUT {
saddr (192.0.2.5 2001:db8::5) proto tcp dport ssh ACCEPT;
}
and do the obvious.
This explicitly *not* modify the "domain ip" and "domain ip6" cases
(single stack) as ferm should not silently discard such errors but let
ip6?tables complain to the admin.
Add support for ferm to automatically apply @ipfilter on constructs
such as:
domain (ip ip6) chain INPUT {
saddr (192.0.2.5 2001:db8::5) proto tcp dport ssh ACCEPT;
}
and do the obvious.
This explicitly *not* modify the "domain ip" and "domain ip6" cases
(single stack) as ferm should not silently discard such errors but let
ip6?tables complain to the admin.
| Makefile | diffblobblamehistory | |
| NEWS | diffblobblamehistory | |
| src/ferm | diffblobblamehistory | |
| test/misc/address-magic.ferm | [new file with mode: 0644] | blob |
| test/misc/address-magic.result | [new file with mode: 0644] | blob |