> accounting > ~~~~~~~~~~ > NFACCT(acc1,acc2) net2fw +test1 !+test2[src] > > produces > > -A net2fw -m set --match-set test1 src -m nfacct --nfacct-name acc1 -m > nfacct --nfacct-name acc2 -m set ! --match-set test2 src > > which is wrong. The alternative syntax of "NFACCT(acc1,acc2) net2fw +[test1,!test2]", which should be the same as the above statement, works and produces what is expected.
------------------------------------------------------------------------------ AlienVault Unified Security Management (USM) platform delivers complete security visibility with the essential security capabilities. Easily and efficiently configure, manage, and operate all of your security controls from a single console and one unified framework. Download a free trial. http://p.sf.net/sfu/alienvault_d2d _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
