Hi there,
I'm "shorewall check"ing my Iptables configs and bumps into the following:
- SW Iptables supports
https://shorewall.org/configuration_file_basics.htm#INCLUDE but not SW NFT.
E.G: "?INCLUDE sw-dmz.macaddresses"
- Sw Iptables supports using
https://shorewall.org/manpages/shorewall-params.html
but not fully SW Nft, more specifically: "file is always processed by
/bin/sh so the full range of shell capabilities may be used.".
E.G: "VM_NET=$(awk -F, '/domain=/ && /vm/{print $2}' $DNSMASQ_CONF)"
- SW Iptables supports
https://shorewall.org/manpages/shorewall-maclist.html but SW Nft does
not work without a MAC address:
E.G: "ACCEPT $VM_IF - 10.17.240.100,10.17.240.120-10.17.240.124"
I'mtesting SW-nft in a VM, built from source.
--
Matt Darfeuille
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
