diff options
| author | Patrick McHardy <kaber@trash.net> | 2009-03-20 08:34:59 +0100 |
|---|---|---|
| committer | Patrick McHardy <kaber@trash.net> | 2009-03-20 08:34:59 +0100 |
| commit | 878cc0e4e863e6b2c9fa71f791d35245b3ddbdb2 (patch) | |
| tree | bd29fb4134cc513820af99f196671264b4c367dc /src/scanner.l | |
| parent | 5c40780440c0e8661fc7cfcec72dab48b934631d (diff) | |
Add support for user-defined symbolic constants
User-defined constants can be used like this:
define allowed_hosts = { 192.168.0.0/24, 10.0.0.20-10.0.0.30 }
define udp_services = domain
define tcp_services = { ssh, domain }
ip saddr $allowed_hosts udp dport $udp_services counter accept
ip saddr $allowed_hosts tcp dport $tcp_services counter accept
Recursive definitions are possible, but currently not fully handled.
Anything requiring transformations (sets using ranges) can not be
used more than once currently since the expressions need to be COW'ed
previously.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'src/scanner.l')
| -rw-r--r-- | src/scanner.l | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/scanner.l b/src/scanner.l index 3b22bb9e..7fc01f77 100644 --- a/src/scanner.l +++ b/src/scanner.l @@ -207,6 +207,8 @@ addrstring ({macaddr}|{ip4addr}|{ip6addr}) "-" { return DASH; } "*" { return ASTERISK; } "@" { return AT; } +"$" { return '$'; } +"=" { return '='; } "=>" { return ARROW; } "map" { return MAP; } "vmap" { return VMAP; } @@ -219,6 +221,7 @@ addrstring ({macaddr}|{ip4addr}|{ip6addr}) "NF_INET_POST_ROUTING" { yylval->val = NF_INET_POST_ROUTING; return HOOKNUM; } "include" { return INCLUDE; } +"define" { return DEFINE; } "describe" { return DESCRIBE; } |