2006-06-07 05:02:49 +02:00
|
|
|
|
2006-06-08 09:01:29 +02:00
|
|
|
- Make it possible for a host to have the same $FW name as the zone in
|
|
|
|
|
which it belongs, and have shoregen automatically create appropriate
|
2006-06-07 05:02:49 +02:00
|
|
|
rules.
|
|
|
|
|
|
|
|
|
|
- At the moment, if a fully-expanded policy file (such as is shown
|
|
|
|
|
|
2006-06-08 09:01:29 +02:00
|
|
|
- Better rule & policy sanitisation.
|
2006-06-07 05:02:49 +02:00
|
|
|
|
2006-06-08 09:01:29 +02:00
|
|
|
- Hosts and interfaces could be reduced based on what's used in the policy
|
|
|
|
|
and rules files.
|
2006-06-07 05:02:49 +02:00
|
|
|
|
|
|
|
|
- The Makefile could be improved to detect changes in the lower level
|
|
|
|
|
config files and call shoregen automatically when they are out-of-date.
|
|
|
|
|
At the moment, shoregen is so simple (and thus fast) that the amount of
|
|
|
|
|
time that would be saved by a clever Makefile (in comparison to the
|
|
|
|
|
rsync, ssh, and shorewall steps) is probably not worth the trouble to
|
|
|
|
|
code.
|
|
|
|
|
|
