On 07/11/2018 07:11 AM, Jeremy Baker wrote: > Is there any way to test for kernel features and have conditional rules > based upon them? As an example, I like to use some geoip country > matches, but sometimes after a kernel update, my distro doesn't have the > xtables kernel module ready. It would be nice if shorewall could start > cleanly regardless. >
?if __GEOIP_MATCH ... ?fi You can do that with any capability displayed by 'shorewall show -f capabilities'; See http://www.shorewall.net:configuration_file_basics.htm#Conditional -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
