Provided by: sanewall-doc_1.0.2+ds-2_all
NAME
sanewall-group - group commands with common options
SYNOPSIS
group with [rule-params] group end
DESCRIPTION
The group command allows you to group together multiple client and server commands. Grouping commands with common options (see optional rule parameters: sanewall-rule-params(5)) allows the option values to be checked only once in the generated firewall rather than once per service, making it more efficient. Nested groups may be used.
EXAMPLES
This: interface any world client all accept server http accept # Provide these services to trusted hosts only server "ssh telnet" accept src "192.0.2.1 192.0.2.2" can be replaced to produce a more efficient firewall by this: interface any world client all accept server http accept # Provide these services to trusted hosts only group with src "192.0.2.1 192.0.2.2" server ssh telnet server ssh accept group end
SEE ALSO
Sanewall program: sanewall(1) Sanewall configuration: sanewall.conf(5) interface definition: sanewall-interface(5) router definition: sanewall-router(5) optional rule parameters: sanewall-rule-params(5)
AUTHOR
Sanewall Team
COPYRIGHT
Copyright © 2012, 2013 Phil Whineray <phil@sanewall.org>