[Ferm] one target for multiple rules

Marc Haber mh+ferm at zugschlus.de
Sun Feb 27 10:07:16 CET 2011


Hi,

I find myself frequently writing stuff like

  saddr $source_list @subchain {
    daddr $target1 proto tcp dport (list1t) ACCEPT;
    daddr $target1 proto udp dport (list1u) ACCEPT;
    daddr $target2 proto tcp dport (list2t) ACCEPT;
    daddr $target2 proto udp dport (list2u) ACCEPT;
  }

and I almost equally frequently forget writing the target, which is of
course an error.

Would it be awfully hard to implement to allow one target to be
written for a list of rules, such as:

  saddr $source_list @subchain {
    {
      daddr $target1 proto tcp dport (list1t);
      daddr $target1 proto udp dport (list1u);
      daddr $target2 proto tcp dport (list2t);
      daddr $target2 proto udp dport (list2u);
    } ACCEPT;
  }

Would it be desireable to have this possibility?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835


More information about the Ferm mailing list