Scroll to navigation

firehol-group(5) 3.1.7 firehol-group(5)

NAME

firehol-group - group commands with common options

SYNOPSIS

group with rule-params

group end

DESCRIPTION

The group command allows you to group together multiple client and server commands.

Grouping commands with common options (see firehol-params(5)) allows the option values to be checked only once in the generated firewall rather than once per service, making it more efficient.

Nested groups may be used.

EXAMPLES

This:

interface any world

client all accept
server http accept
# Provide these services to trusted hosts only
server "ssh telnet" accept src "192.0.2.1 192.0.2.2"

can be replaced to produce a more efficient firewall by this:

interface any world

client all accept
server http accept
# Provide these services to trusted hosts only
group with src "192.0.2.1 192.0.2.2"
server telnet accept
server ssh accept
group end

SEE ALSO

firehol(1) - FireHOL program
firehol.conf(5) - FireHOL configuration
firehol-interface(5) - interface definition
firehol-router(5) - router definition
firehol-params(5) - optional rule parameters
FireHOL Website (http://firehol.org/)
FireHOL Online PDF Manual (http://firehol.org/firehol-manual.pdf)
FireHOL Online Documentation (http://firehol.org/documentation/)

AUTHORS

FireHOL Team.

Built 28 Feb 2021 FireHOL Reference