extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-15 20:24:09 +01:00
Code Issues Packages Projects Releases Wiki Activity

Split the Shell Variables section into multiple sections.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2012-12-16 08:45:46 -08:00
parent 2869a9a94d
commit 1dc0f8b170
1 changed files with 129 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

169
docs/configuration_file_basics.xml
View File

@ -1280,10 +1280,68 @@ SHELL cat /etc/shorewall/rules.d/*.rules 2&gt; /dev/null || true</programlisting
</listitem> </listitem>
</orderedlist> </orderedlist>
<para>Beginning with Shorewall 4.4.27, you may also use options in <ulink
url="manpages/shorewall.conf.html">shorewall.conf</ulink> (5) (e.g.,
$BLACKLIST_LOGLEVEL).</para>
<note>
<para>When an option is set to 'No' in shorewall.conf, the corresponding
shell variable will be empty.</para>
</note>
<note>
<para>Options that were not set in shorewall.conf will expand to their
default value.</para>
</note>
<para id="Rvariables">Beginning with Shorewall 4.5.2, configuration files <para id="Rvariables">Beginning with Shorewall 4.5.2, configuration files
can access variables defined in the <ulink can access variables defined in the <ulink
url="Install.htm#shorewallrc">shorewallrc file</ulink>.</para> url="Install.htm#shorewallrc">shorewallrc file</ulink>.</para>
<para>Beginning with Shorewall 4.5.11, variables can be altered by
compiler directives.</para>
<variablelist>
<varlistentry>
<term>?SET <replaceable>variable value</replaceable></term>
<listitem>
<para>The <replaceable>variable</replaceable> can be specified
either with or without a leading '$' to allow using both Perl and
Shell variable representation.</para>
<para>The <replaceable>value</replaceable> is a Perl-compatible
expression.</para>
<note>
<para>The Shorewall compiler performs variable expansion within
the expression. So variables are expanded even when they appear in
single quotes.</para>
</note>
<note>
<para>If a variable within the expression can contain a
non-numeric value, it is a good idea to enclose it in quotes.
Otherwise, the Shorewall compiler has to guess whether to enclose
the variable's value in quotes or not.</para>
</note>
</listitem>
</varlistentry>
<varlistentry>
<term>?RESET <replaceable>variable</replaceable></term>
<listitem>
<para>Removes the named <replaceable>variable</replaceable> from the
compiler's variable table.</para>
</listitem>
</varlistentry>
</variablelist>
</section>
<section id="AddressVariables">
<title>Address Variables</title>
<para>Given that shell variables are expanded at compile time, there is no <para>Given that shell variables are expanded at compile time, there is no
way to cause such variables to be expended at run time. Prior to Shorewall way to cause such variables to be expended at run time. Prior to Shorewall
4.4.17, this made it difficult (to impossible) to include dynamic IP 4.4.17, this made it difficult (to impossible) to include dynamic IP
@ -1456,57 +1514,83 @@ SHELL cat /etc/shorewall/rules.d/*.rules 2&gt; /dev/null || true</programlisting
<para>If there is no gateway out of the named interface, the nil IP <para>If there is no gateway out of the named interface, the nil IP
address is used (0.0.0.0 in IPv4 and :: in IPv6). That way, the generated address is used (0.0.0.0 in IPv4 and :: in IPv6). That way, the generated
rule will match no packets (or all packets if used with exclusion).</para> rule will match no packets (or all packets if used with exclusion).</para>
</section>
<para>Beginning with Shorewall 4.4.27, you may also use options in <ulink <section id="ActionVariables">
url="manpages/shorewall.conf.html">shorewall.conf</ulink> (5) (e.g., <title>Action Variables</title>
$BLACKLIST_LOGLEVEL).</para>
<note> <para>Action variables were introduced in Shorewall 4.4.16 and may be
<para>When an option is set to 'No' in shorewall.conf, the corresponding accessed within the body of an <ulink
shell variable will be empty.</para> url="Actions.html">action</ulink>.</para>
</note>
<note>
<para>Options that were not set in shorewall.conf will expand to their
default value.</para>
</note>
<para>Beginning with Shorewall 4.5.11, variables can be altered by
compiler directives.</para>
<variablelist> <variablelist>
<varlistentry> <varlistentry>
<term>?SET <replaceable>variable value</replaceable></term> <term>Parameter variables</term>
<listitem> <listitem>
<para>The <replaceable>variable</replaceable> can be specified <para>Parameter variables expand to the value of the corresponding
either with or without a leading '$' to allow using both Perl and action parameter. <emphasis>$1</emphasis> is the first parameter,
Shell variable representation.</para> <emphasis>$2</emphasis> is the second parameter and so on.</para>
<para>The <replaceable>value</replaceable> is a Perl-compatible
expression.</para>
<note>
<para>The Shorewall compiler performs variable expansion within
the expression. So variables are expanded even when they appear in
single quotes.</para>
</note>
<note>
<para>If a variable within the expression can contain a
non-numeric value, it is a good idea to enclose it in quotes.
Otherwise, the Shorewall compiler has to guess whether to enclose
the variable's value in quotes or not.</para>
</note>
</listitem> </listitem>
</varlistentry> </varlistentry>
<varlistentry> <varlistentry>
<term>?RESET <replaceable>variable</replaceable></term> <term>Chain name</term>
<listitem> <listitem>
<para>Removes the named <replaceable>variable</replaceable> from the <para>Beginning with Shorewall 4.5.10, $0 expands to the name of the
compiler's variable table.</para> action chain. Shorewall generates a separate chain for each unique
(action,log-level,log-tag,parameters) tupple. The first such chain
has the same name as the action itself. Subsequent chains are formed
by prepending '%' to the action name and appending a number to
insure uniqueness. For an action called 'Action', the chains would
be <emphasis>Action</emphasis>, <emphasis>%Action</emphasis>,
<emphasis>%Action0</emphasis>, <emphasis>%Action1</emphasis> and so
on.</para>
</listitem>
</varlistentry>
</variablelist>
</section>
<section>
<title>Shorewall Variables</title>
<para>Shorewall Variables were introduced in Shorewall 4.5.11. To insure
uniqueness, these variables start with the character @; the name of the
variable must be enclosed in {...} when the following character is
alphanumeric or is an underscore ("_"). With the exception of @0 (or it's
alias @chain), Shorewall variables may only be used within an action
body.</para>
<para>The Shorewall variables are:</para>
<variablelist>
<varlistentry>
<term>@0 and @chain</term>
<listitem>
<para>Expands to the name of the current chain. Unlike $0, @0 has
all non-alphanumeric characters except underscore removed. Also
unlike $0, @0 may be used in SWITCH columns in the rules
file.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>@loglevel</term>
<listitem>
<para>Expands to the log level specified when the action was
invoked.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>@logtag</term>
<listitem>
<para>Expands to the log tag specified when the action was
invoked.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>
@ -1555,7 +1639,7 @@ SHELL cat /etc/shorewall/rules.d/*.rules 2&gt; /dev/null || true</programlisting
<para>Unless <replaceable>variable</replaceable> is one of these <para>Unless <replaceable>variable</replaceable> is one of these
pre-defined ones, it is searched for in the following places in the order pre-defined ones, it is searched for in the following places in the order
listed:</para> listed.</para>
<itemizedlist> <itemizedlist>
<listitem> <listitem>
@ -1578,6 +1662,11 @@ SHELL cat /etc/shorewall/rules.d/*.rules 2&gt; /dev/null || true</programlisting
</listitem> </listitem>
</itemizedlist> </itemizedlist>
<important>
<para>Beginning with Shorewall 4.5.11, the compiler's environmental
variables are search last rather than first.</para>
</important>
<para>If the <replaceable>variable</replaceable> is still not <para>If the <replaceable>variable</replaceable> is still not
found:</para> found:</para>
@ -1599,7 +1688,7 @@ SHELL cat /etc/shorewall/rules.d/*.rules 2&gt; /dev/null || true</programlisting
<para>If it is not found in any of those places, the <para>If it is not found in any of those places, the
<replaceable>variable</replaceable> is assumed to have a value of 0 <replaceable>variable</replaceable> is assumed to have a value of 0
(false) in Shorewall versions prior to 4.5.11. In 4.5.11 and later, it is (false) in Shorewall versions prior to 4.5.11. In 4.5.11 and later, it is
assumed to have the value '' (empty string which also evaluates to assumed to have the value '' (an empty string, which also evaluates to
false).</para> false).</para>
<para>The setting in <filename>/etc/shorewall/params</filename> by be <para>The setting in <filename>/etc/shorewall/params</filename> by be