[PATCH] associate user defined name with rule match

[PATCH] associate user defined name with rule match

[Jay Schulist]

[-- Attachment #1: Type: TEXT/PLAIN, Size: 393 bytes --]

Hello Harald,
Here is a new match which allows the user to associate a name with a rule.
It is a very simple match, but it is useful if the user needs an easy way
to track a rule by name.

Iptables userspace patch is against a clean iptables-1.2.7a
Kernel patch is against a clean linux-2.4.19

name v1.2.7a options:
 --n name                       name to associate with rule

Thanks,
jay-s.

[-- Attachment #2: Type: APPLICATION/octet-stream, Size: 1440 bytes --]

[-- Attachment #3: Type: APPLICATION/octet-stream, Size: 1420 bytes --]

Re: [PATCH] associate user defined name with rule match

[Patrick Schaaf]

On Tue, Sep 17, 2002 at 10:48:04PM -0700, Jay Schulist wrote:
> Here is a new match which allows the user to associate a name with a rule.
> It is a very simple match, but it is useful if the user needs an easy way
> to track a rule by name.

I don't understand. Do you mean "tag with some string, so we can later
easily grep for it"? No real match operation, just a way to attach some
text to a rule?

If that's it, I vote to rename the thing "comment", and please permit
arbitrary quoted strings (with proper escaping for iptables-restore's
benefit).

best regards & thanks for your work
  Patrick

Re: [PATCH] associate user defined name with rule match

[Jay Schulist]

On Wed, 18 Sep 2002, Patrick Schaaf wrote:

> I don't understand. Do you mean "tag with some string, so we can later
> easily grep for it"? No real match operation, just a way to attach some
> text to a rule?
> 
> If that's it, I vote to rename the thing "comment", and please permit
> arbitrary quoted strings (with proper escaping for iptables-restore's
> benefit).
> 

right, it already does quoted strings on iptables-save.

jay-s.

Re: [PATCH] associate user defined name with rule match

[Adam Young]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 17 Sep 2002 22:48:04 -0700 (PDT)
Jay Schulist <jschlst@linux-sna.org> wrote:


	Isn't this already available via --log-prefix ?  I've been using that for the
longest time, and if I want to see all hits on port 1433, I just say "grep MSSQL
/var/log/messages", for example, and it brings all of those up.

	Adam

> Hello Harald,
> Here is a new match which allows the user to associate a name with a rule.
> It is a very simple match, but it is useful if the user needs an easy way
> to track a rule by name.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9ibkRUanLvazj+VgRAjTHAJ9Wk6JZa11FTKyXB/BF095x1hBunQCfXH/S
jfF1zT8Gn7cbstJNVSUN6uI=
=MN++
-----END PGP SIGNATURE-----

Re: [PATCH] associate user defined name with rule match

[Jay Schulist]

On Thu, 19 Sep 2002, Adam Young wrote:

> 	Isn't this already available via --log-prefix ?  I've been using that for the
> longest time, and if I want to see all hits on port 1433, I just say "grep MSSQL
> /var/log/messages", for example, and it brings all of those up.
> 

Actually this match is simpiler than that, it only displays a user defined
string for a rule on an iptables -L or iptables-save.

It does this for the benefit of parsing through rules. This is used by
some people to allow automated generation/regeneration of rulesets.

jay-s.

> > Hello Harald,
> > Here is a new match which allows the user to associate a name with a rule.
> > It is a very simple match, but it is useful if the user needs an easy way
> > to track a rule by name.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.7 (GNU/Linux)
> 
> iD8DBQE9ibkRUanLvazj+VgRAjTHAJ9Wk6JZa11FTKyXB/BF095x1hBunQCfXH/S
> jfF1zT8Gn7cbstJNVSUN6uI=
> =MN++
> -----END PGP SIGNATURE-----
>