also sprach Yaroslav Halchenko <[EMAIL PROTECTED]> [2006.06.05.0308 +0200]:
> Let me summarize whatever you are asking (if I got it right):
> 
> * add fwstart_after fwend_before rules into general configuration since
>   you don't want to modify default shipped configuration file.
> 
> is that correct?

not general configuration, but per-service.

> I think that this and the other issues would go away with next
> version which will have split config files so you could override
> any parameter definition without modifying shipped config file.

ah, right. now i remember. I can wait.

> I am not sure if addition of new fwstart_/end_* rules is
> reasonable since they can be easily placed into the fwstart/end
> definitions and be "tuned" using interpolations based on redefined
> per sections parameters (like port, protocol now) 

but what if i want all my service to use rules A, B, C, but only
service X should use A, B, D, C ?

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`.     martin f. krafft <[EMAIL PROTECTED]>
: :'  :    proud Debian developer and author: http://debiansystem.info
`. `'`
  `-  Debian - when you have better things to do than fixing a system

Attachment: signature.asc
Description: Digital signature (GPG/PGP)

Reply via email to