puppet-firewalld icon indicating copy to clipboard operation
puppet-firewalld copied to clipboard

why not generate the range syntax when port => 'start:end' is encountered in a rich rule?

Open kenyapcomau opened this issue 7 years ago • 9 comments

Why not generate the single port element:

<port protocol="tcp" port="start-end"/>

instead of lots of port elements like:

<port protocol="tcp" port="start"/> ... <port protocol="tcp" port="end"/>

This is what the builtin rules use and it would make the iptables rules more compact.

Thanks.

kenyapcomau avatar Dec 14 '17 04:12 kenyapcomau