Re: [Shorewall-devel] Shorewall and IPV6

[Steve H. <he...@th...>]

Could a + work?  I am thinking of a feature plus an option or restriction.
Maybe a - would work, but it is used in ranges so it might make parsing 
too hard.

ACCEPT          $FW       loc:192.168.168.3     all     all

ACCEPT          $FW       loc+192.168.168.3     all     all


How hard is it for your parser to be changed from : to another character?
Is the separator character a parameter?  Maybe extracting it out would be
the first step in trying alternates.


-- 
Steve Herber	he...@th...		work: 206-221-7262
Security Engineer, UW Medicine, IT Services	home: 425-454-2399

On Thu, 6 Jan 2005, Tom Eastep wrote:

> Paul Gear wrote:
> > 
> > There is going to be a lot of pain in the upgrade to IPv6 anyway - i
> > think preparing people by getting them used to the fact that colon can't
> > be a separator any more is a "good thing".
> > 
> > 
> 
> Please try a little exercise -- open up a copy of a complex rules file
> and experiment with different separators (other than ":") -- find any
> you like? I haven't :-(
> 
> Note that we only have to change the separator in columns that can
> potentially contain an address.
> 
> -Tom
>