NAME

       nuaclgen - NUFW acl generator

SYNOPSIS

       nuaclgen  [ --Schema eq|ineq ] [ --Aclname ACLDN ] [ --saddr NETWORK1 ] [ --daddr NETWORK2
       ] [ --proto PROTONUMBER ] [ --sport P1[:P2] ] [ --dport P3[:P4] ] [ --OsName  OSNAME  ]  [
       --OsVersion  OSVERSION  ]  [  --OsRelease  OSRELEASE  ]  [  --AppName APPLICATION NAME ] [
       --AppSig APPLICATION SIGNATURE ] [ --Separator SEPARATOR ]  [  --jump  [ACCEPT|DROP]  ]  [
       --groups GROUPLIST ]

       nuaclgen [ --List ] [ --groups Id Group ]

       nuaclgen [ --Delete DN ]

       nuaclgen [ --help ]

DESCRIPTION

       This manual page documents the nuaclgen command.

       nuaclgen  is  an  Access  control  list  generator  for  the  ldap  backend of Nuauth, the
       authentication server of the NUFW package.

       Original packaging and informations and help can be found from http://www.nufw.org/

OPTIONS

       --Schema eq|ineq
              Use equality schema or not (Equality schema requires dport be specified, and is the
              default.

       --AclName Acl DN
              Add an acl in the ldap tree with dn Acl DN

       --saddr Network
              Specify   source   network   for   the   acl,   with   network   of   the   form  :
              aaa.bbb.ccc.ddd[/ee]. Default value : 0.0.0.0/0

       --daddr Network
              Specify  destination  network  for  the  acl,  with   network   of   the   form   :
              aaa.bbb.ccc.ddd[/ee]. Default value : 0.0.0.0/0

       --proto Protocol number
              Specify protocol type for the acl

       --sport Source port
              Specify source port(s) for the Acl. NNNN:MMMM can be used to specify a port range.

       --dport Destination port
              Specify  destination  port(s)  for the Acl. NNNN:MMMM can be used to specify a port
              range.

       --jump Decision
              Specify decision for the Acl. Has to be ACCEPT or DROP.

       --groups Groups list
              Specify  the  user  group(s)  on  which  Acl  apply.  Must  be  of   the   form   :
              Group1[,Group2[,...]]

       --List --group Group ID
              List Acls for the Group ID group

       --Delete Dn
              Deletes the Acl stored in the provided Dn

       --help Displays a brief resume of available options and quits

SEE ALSO

       nufw(8)

       nuauth(8)

AUTHOR

       Nuauth  was designed and coded by Eric Leblond, aka Regit (<eric@regit.org>) , and Vincent
       Deffontaines, aka gryzor (<vincent@gryzor.com>). Original idea in 2001, while  working  on
       NSM Ldap support.

       This manual page was written by Eric Leblond and copyrighted by INL (2003-2005)

       Permission  is  granted to copy, distribute and/or modify this document under the terms of
       the GNU  Free  Documentation  License,  Version  2  as  published  by  the  Free  Software
       Foundation; with no Invariant Sections, no Front-Cover Texts and no Back-Cover Texts.

                                           12 mars 2007                               NUACLGEN(8)