secgroup/fws

Overview of supported IPtables functionality and syntax

Opened this issue · 2 comments

At the moment it is a bit hit and miss to figure out what IPtables functions are supported. E.g. using the --source-ports directive or the iprange module appear to crash fws.

Hi, at the moment fws supports the options that are used in the examples, that cover the most used ones.

You can see a list in the parse_iptables.py#L40 file (negated=True means that you can use the "!" symbol to negate the argument and mapper=[...]split(",") means that you can insert multiple values separated by ",")

I will leave the issue open until we write the list in a readme file or in the help command 😉

Great, thanks!