On 7/31/12 3:55 PM, "Benny Pedersen" <[email protected]> wrote:
>Den 2012-07-31 23:40, Tom Eastep skrev: >> Shorewall supports the iptables CT target now (see >> shorewall-notrack(5)); the problem is that when the deprecated mode >> is >> turned off, everyone who uses helpers (which is almost 100% of the >> Shorewall user base) will have to change their configuration in an >> unintuitive way. > >yes its need more dokumention before rule out, you say xtables-addons >geoip module works from notrack ? No -- and I'm unlikely to add such support, given how expensive a call to geoip is. > >since geoip is public avail in csv files it would make an php to >convert it to shorewall blacklist format, much more stable for me :=) I won't put blacklisting in the notrack file; it's way too expensive at runtime. -Tom You do not need a parachute to skydive. You only need a parachute to skydive twice. ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
