Re: [Shorewall-users] ADD action exclude both ipset and port range

On 4/17/20 6:41 AM, Vieri Di Paola wrote: > Hi, > > This might be trivial, but how can I add a source IP address to an > ipset only when the source port is NOT in an ipset AND NOT in a port > range? > > the following gives an error: > > ADD(POL_BL:src):info:polbl,add2polbl > net1,net2,net3:!+POL

[Shorewall-users] ADD action exclude both ipset and port range

Hi, This might be trivial, but how can I add a source IP address to an ipset only when the source port is NOT in an ipset AND NOT in a port range? the following gives an error: ADD(POL_BL:src):info:polbl,add2polbl net1,net2,net3:!+POL_BL,+GLOBAL_WL,+NORMAL_WL all tcp - !+POL_BL_EXCL,4