On Wed, 2011-08-10 at 21:43 +0200, Mathijs Kwik wrote: > Yeah that's what I was aiming for now (external script running on > NetworkManager dispatch event). > I was just checking if I didn't miss any features already there. > > > For now, I think it's easiest to just have a few config directories. > I let the script setup a 'current' symlink and restart shorewall with > that.
Shorewall also supports multiple configuration directories; see http://www.shorewall.net/configuration_file_basics.htm#Levels > > > This might quickly grow out of control, and the amount of duplication > in the configs is quite a lot, but most of the time, firewall rules > are something I setup once, and don't change a lot anymore, until a > revision some 5 years later. > If it bothers me, I might look into params / conditional blocks. You can also put files that are the same in multiple configs in a separate directory and use CONFIG_PATH. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ uberSVN's rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
