Package: iptables
Version: 1.3.3-2
Severity: wishlist

with a command similar to 'iptables -I INPUT -2 -j LOG', whereas only positive integers are allowed after INPUT at present. Otherwise why not use 'iptables -A INPUT 2 -j LOG'.

This can be done with the help of a command like awk, but it makes scripts a bit more obscure (and I don't know, as probably others, how to use awk).

I would use this in my simple config to be able to add a few rules per interface, without having to rerun all the scripts when only one interface is going down or up (it would require to test if each interface is up or down and add complexity): a few last rules make a policy (since a user defined chain is not allowed as a policy) and I would like to add some dropping rules just before the policy.

Please forward this wish item where it is appropriate, if you think it is usefull.

Geraud Meyer

-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (990, 'testing'), (850, 'unstable'), (500, 'testing-proposed-updates'), (500, 'propo$
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages iptables depends on:
ii  libc6                         2.3.6-7    GNU C Library: Shared libraries

iptables recommends no packages.

-- no debconf information

_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar - get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to