[capirca-dev] iptables interface "-i" option, need verbatim?

[Kristian Erik Hermansen]

Hello,

In order to get capirca to render something like

-A INPUT -i lo -j ACCEPT

for iptables to allow any traffic on the loopback interface, is it
necessary to use the verbatim option? And if so, I was unable to
determine the proper usage. Thoughts? Thanks in advance.

Regards,
--
Kristian Erik Hermansen


--
Subscription settings: http://groups.google.com/group/capirca-dev/subscribe?hl=en

[Tony Watson]

Capirca doesn't have support for interface specific rules at this point.  As you noted, verbatim was added for special cases like these.

The verbatim:: line should look like the following:

term base-allow-lo0 {

  comment:: "Allow all loopback communications"

  verbatim::  iptables "-A INPUT -i lo -j ACCEPT"