On 4/20/13 8:58 AM, "Dash Four" <[email protected]> wrote:
> > >Tom Eastep wrote: >> On 04/19/2013 06:53 PM, Tom Eastep wrote: >> >>> On 4/19/13 6:48 PM, "Dash Four" <[email protected]> wrote: >>> >>> >>>>>> OK, I'll get on it, but before that I need to ask whether you have >>>>>>the >>>>>> "magical" NFACCT keyword for me to use after the ";" symbol (i.e. >>>>>> "INLINE ; NFACCT(all)" to place the nfacct match as well as include >>>>>> nfacct executable statements to create that object)? >>>>>> >>>>>> >>>>> There is none -- everything after ';' is up to you. >>>>> >>>>> >>>> Damn! Is there a chance to add this or implement something similar? >>>> >>> No. INLINE is a hack to allow raw ip[6]tables commands to be integrated >>> during the compile phase. But it are just that -- raw. It is integrated >>> with the optimizer but that's about it. >>> >>> >> >> It is a simple change, however, to automatically record nfacct object >> names when transforming each rule into the internal form. Will be in the >> next version. >> >Thanks! Would that be done "internally" or via "fancy" custom-defined >action? Internally. -Tom You do not need a parachute to skydive. You only need a parachute to skydive twice. ------------------------------------------------------------------------------ Precog is a next-generation analytics platform capable of advanced analytics on semi-structured data. The platform includes APIs for building apps and a phenomenal toolset for data science. Developers can use our toolset for easy data analysis & visualization. Get a free account! http://www2.precog.com/precogplatform/slashdotnewsletter _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
