Tom Eastep wrote:
> On 04/19/2013 06:53 PM, Tom Eastep wrote:
>   
>> On 4/19/13 6:48 PM, "Dash Four" <[email protected]> wrote:
>>
>>     
>>>>> OK, I'll get on it, but before that I need to ask whether you have the
>>>>> "magical" NFACCT keyword for me to use after the ";" symbol (i.e.
>>>>> "INLINE ; NFACCT(all)" to place the nfacct match as well as include
>>>>> nfacct executable statements to create that object)?
>>>>>     
>>>>>           
>>>> There is none -- everything after ';' is up to you.
>>>>   
>>>>         
>>> Damn! Is there a chance to add this or implement something similar?
>>>       
>> No. INLINE is a hack to allow raw ip[6]tables commands to be integrated
>> during the compile phase. But it are just that -- raw. It is integrated
>> with the optimizer but that's about it.
>>
>>     
>
> It is a simple change, however, to automatically record nfacct object
> names when transforming each rule into the internal form. Will be in the
> next version.
>   
Thanks! Would that be done "internally" or via "fancy" custom-defined 
action?

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to