On 04/04/2016 08:27 AM, Tom Eastep wrote:
> You will probably need to use this form instead or the compiler will
> complain about the quotes:
>
> INLINE(DROP) net $FW tcp 25 ; -m string --algo bm --string 'ylmf-pc'

string matches in SW rules appear quite useful.

I tend to organize my *IP* lists in IPSETs; SW make using them trivial.

Can these INLINE(DROP) rules be adapted to IPSET use -- or some other 
efficient table mechanism ?  E.g., for a list of strings in file: 
bad_strings.txt ...


------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to