Репозиторий Sisyphus
Последнее обновление: 1 октября 2023 | Пакетов: 18631 | Посещений: 37767650
en ru br
Репозитории ALT
S:1.22.1-alt4
5.1: 1.21.1-alt1
4.1: 1.21.1-alt0.M41.1
4.0: 1.21.1-alt0.M40.1
3.0: 1.19.2-alt2
+backports:1.20.1-alt0.M30.1
www.altlinux.org/Changes

Другие репозитории
Upstream:1.21.1

Группа :: Безопасность/Сети
Пакет: fiaif

 Главная   Изменения   Спек   Патчи   Sources   Загрузить   Gear   Bugs and FR  Repocop 

Патч: fiaif-1.21.1-alt-autonumbering_note.patch
Скачать


Add a note about autonumbering feature
--- ./conf/zone.ext	2008-07-27 16:28:49 +0400
+++ ./conf/zone.ext	2008-07-27 16:28:49 +0400
@@ -36,6 +36,12 @@ DHCP_SERVER=0
 
 ## The descriptions of packets coming IN to the interface specifed in DEV and NETWORK to drop|accept|reject 
 ## Use: INPUT[N]="<ACCEPT|REJECT|DROP> <protocol [port[:port][<,port>[:port]]*]> <ip[/mask]=>ip[/mask]>"
+##
+## Note: You may automate rule's numbering by using (ugly) construction INPUT[${#INPUT[@]}]="<rule>"
+##       This also works for OUTPUT, FORWARD, MARK and SNAT rules. 
+##       For replacing all numbers with array length following command could be used:
+##       $ subst 's!\(INPUT\|OUTPUT\|FORWARD\|SNAT\|MARK\)\[\([0-9]\+\)\]!\1[${#\1[@]}]!g' zone.*
+##
 INPUT[0]="ACCEPT tcp smtp,www,https,ssh 0.0.0.0/0=>0.0.0.0/0"
 INPUT[1]="ACCEPT icmp echo-request 0.0.0.0/0=>0.0.0.0/0"
 #INPUT[2]="ACCEPT igmp 0.0.0.0/0=>224.0.0.0/4"
--- ./conf/zone.dmz	2008-07-27 16:28:49 +0400
+++ ./conf/zone.dmz	2008-07-27 16:28:49 +0400
@@ -45,6 +45,12 @@
 
 ## The descriptions of packets coming IN to the interface specifed in DEV and NETWORK to drop|accept|reject 
 ## Use: INPUT[N]="<ACCEPT|REJECT|DROP> <protocol [port[:port][<,port>[:port]]*]> <ip[/mask]=>ip[/mask]>"
+##
+## Note: You may automate rule's numbering by using (ugly) construction INPUT[${#INPUT[@]}]="<rule>"
+##       This also works for OUTPUT, FORWARD, MARK and SNAT rules. 
+##       For replacing all numbers with array length following command could be used:
+##       $ subst 's!\(INPUT\|OUTPUT\|FORWARD\|SNAT\|MARK\)\[\([0-9]\+\)\]!\1[${#\1[@]}]!g' zone.*
+##
 INPUT[0]="REJECT ALL 0.0.0.0/0=>0.0.0.0/0"
 
 ## The descriptions of packets going OUT of the interface specifed in DEV and NETWORK to drop|accept|reject 
--- ./conf/zone.int	2008-07-27 16:30:53 +0400
+++ ./conf/zone.int	2008-07-27 16:31:27 +0400
@@ -37,6 +37,12 @@
 
 ## The descriptions of packets coming IN to the interface specifed in DEV and NETWORK to drop|accept|return 
 ## Use: INPUT[N]="<ACCEPT|REJECT|DROP> <protocol [port[:port][<,port>[:port]]*]> ip[/mask]=>ip[/mask]"
+##
+## Note: You may automate rule's numbering by using (ugly) construction INPUT[${#INPUT[@]}]="<rule>"
+##       This also works for OUTPUT, FORWARD, MARK and SNAT rules..
+##       For replacing all numbers with array length following command could be used:
+##       $ subst 's!\(INPUT\|OUTPUT\|FORWARD\|SNAT\|MARK\)\[\([0-9]\+\)\]!\1[${#\1[@]}]!g' zone.*
+##
 INPUT[0]="ACCEPT ALL 0.0.0.0/0=>0.0.0.0/0"
 
 ## The descriptions of packets going OUT of the interface specifed in DEV and NETWORK to drop|accept|return 
 
дизайн и разработка: Vladimir Lettiev aka crux © 2004-2005, Andrew Avramenko aka liks © 2007-2008
текущий майнтейнер: Michael Shigorin