On 02/24/2012 02:54 PM, Tom Eastep wrote:
> On 02/24/2012 01:51 PM, Neil Watson wrote:
>> On Fri, Feb 24, 2012 at 01:46:40PM -0800, Tom Eastep wrote:
>>> Can't you simply
>>>
>>>     iptables-save > file1
>>>
>>> using your own ruleset and
>>>
>>>     iptables-save > file2
>>>
>>> with the Shorewall-generated ruleset loaded, then compare file1 and file2?
>>
>> The counters have to be cleared and the comments remove but yes this
>> does work.  I was hoping for way that involved less steps.
>>
> 
> If you are referring to the comments that Shorewall adds to macro
> expansions, those can be disabled by setting AUTO_COMMENT=No in
> shorewall.conf.
> 

And counts only appear in the output when the -c option is used.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to