ACC SHELL
YaST bytecode 1.4.0 SuSEFirewallExpertRules SuSEFirewallExpertRules.ycp SuSEFirewall Netmask IP allowed_expert_protocols GetAllExpertRulesProtocols type_ip4 ValidNetmaskBits IsValidNetwork ValidNetwork
AdjustParameters GetListOfAcceptRules AddNewAcceptRule
RemoveAcceptRule DeleteRuleID + M network t zone zone params
% zone params R zone rule_id 0 base3 SuSEFirewall GetKnownFirewallZones GetAcceptExpertRules SetAcceptExpertRules 3 Netmask Check4 3 IP Check4 $# udp tcp icmp all _rpc_%+ -, $0 7 [0123456789]+.[0123456789]+.[0123456789]+.[0123456789]+%7 netmask_bits -8 && %M (O regexpmatch + + ^ $4O -P (T regexpmatch + + ^ /[01234567890]+$4T part_ip part_bits $U regexpsub + + ^( )/[01234567890]+$ \1$V regexpsub + + ^ (/[01234567890])+$ \1-X && tointeger (\ 0/04\ -] (a regexpmatch + + + + ^ / $4a part_ip part_netmask $b regexpsub + + + + ^( )/ $ \1$c regexpsub + + + + ^ /( )$ \1-e && 4i ,j
y2warning
Unknown network type: %1 -k %t -v A valid network definition can contain the IP,
IP/Netmask, IP/Netmask_Bits, or 0/0 for all networks.
Examples:
IP: 192.168.0.1
IP/Netmask: 192.168.0.0/255.255.255.0
IP/Netmask_Bits: 192.168.0.0/24 or 192.168.0.1/32
base%
params ( network 4 ,
y2warning
( No network defined, using '0/0' instead!' network 0/0 ( protocol 4 ,
y2warning
) No protocol defined, using 'all' instead!' protocol all ' protocol tolower protocol - % rules & toupper ( ! contains 4 ,
y2error
Unknown firewall zone: %1 - $ maplist one_rule splitstring +
rule_splitted $ splitstring ,- network protocol dport sport & filter one_rule ! && && && network protocol dport sport - %
current_rules new_rule
& toupper ( ! contains 4 ,
y2error
Unknown firewall zone: %1 - $ ( 4 ,
y2error
2 Impossible to set new AcceptExpertRule for zone %1 - &
$ + + network , protocol ( || dport sport 4 & + + , dport ( sport 4 & + + , sport ( 0/0,all4 ,
y2warning
: Adding rule '%1' that allows everything from all networks! & + + size - %%
current_rules remove_rule current_rules_list && toupper () ! contains 4) ,*
y2error
Unknown firewall zone: %1 -+ $. (/ 4/ ,0
y2error
2 Impossible remove any AcceptExpertRule for zone %1 -1 $5 + + network , protocol (6 dport &6 + + , dport (7 sport &7 + + , sport $: splitstring
&; filter one_rule && && ,&> mergestring -@ %R
current_rules current_rules_list (T ! contains 4T ,U
y2error
Unknown firewall zone: %1 -V $Y (Z 4Z ,[
y2error
2 Impossible remove any AcceptExpertRule for zone %1 -\ $_ splitstring
(` 4` &a remove &b mergestring ,c -d 4e ,f
y2error
, Cannot remove %1, such entry does not exist. -g
ACC SHELL 2018