On 04/04/2016 08:27 AM, Tom Eastep wrote: > You will probably need to use this form instead or the compiler will > complain about the quotes: > > INLINE(DROP) net $FW tcp 25 ; -m string --algo bm --string 'ylmf-pc'
string matches in SW rules appear quite useful. I tend to organize my *IP* lists in IPSETs; SW make using them trivial. Can these INLINE(DROP) rules be adapted to IPSET use -- or some other efficient table mechanism ? E.g., for a list of strings in file: bad_strings.txt ... ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users