-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joshua J. Kugler wrote:
> 
> Which led me to wonder: Is the shorewall compiler output "pluggable," or 
> at least self-contained as to be easily replaceable?  I was thinking 
> along the lines of the rules and config being parsed into a 
> firewall-agnostic datastructure, then I could take that data structure 
> and write out rules in the RouterOS dialect.
> 
> Any chance of that?

No time soon, I'm afraid. The Shorewall compiler is a two-pass compiler
that builds iptables commands and Linux-specific shell code fragments in
the first pass then glues them all together in a second pass (although
the code structure doesn't really make that obvious).

I have on my long-term list of goals to re-implement Shorewall along the
lines that you suggest, but that won't happen until after I retire
(currently planned for 2012). I'm also not convinced that the goal is
reachable since the externals of Shorewall itself are very Linux-centric.

- -Tom

- -Tom
- --
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkrc+vkACgkQO/MAbZfjDLKpCwCfQ/bdslN5yX6RwKwYEjJYqNqu
DSgAn1YFaww9TrLJlRUETzeqtz6SYd7w
=LiEE
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to