# HG changeset patch # User Matthew Wild # Date 1479571171 0 # Node ID 5bfb2ccab2ab1eec543428eaa10c3e6cfc21ddda # Parent 00eed68f63bf2f19660968a0f984a0b5cb61dc82 mod_firewall: README: Add more info about specifying rule set files diff -r 00eed68f63bf -r 5bfb2ccab2ab mod_firewall/README.markdown --- a/mod_firewall/README.markdown Sat Nov 19 15:52:32 2016 +0000 +++ b/mod_firewall/README.markdown Sat Nov 19 15:59:31 2016 +0000 @@ -57,10 +57,16 @@ a message to someone at any of the hosts defined in the 'myorganisation' outside of office hours. -Firewall rules should be written to a `ruleset.pfw` file. Multiple such -rule files can be specified in the configuration using: +Specifying rule sets +-------------------- - firewall_scripts = { "path/to/ruleset.pfw" } +Firewall rules should be written into text files, e.g. `ruleset.pfw` file. +One or more rule files can be specified in the configuration using: + + firewall_scripts = { "path/to/ruleset.pfw", "path/to/ruleset2.pfw" } + +If multiple files are specified and they both add rules to the same chains, +each file's rules will be processed in order, but the order of files is undefined. Conditions ----------