[pve-devel] bidrectionnal macros ?

[Alexandre DERUMIER]

>>A quick search revealed three macros:
>>
>>NTPbi
>>RIPbi
>>SBMBI
>>
>>For my point of view, we can simply remove them for now. Or do you 
>>think many users will need them?

I think we can remove them.

they are already NTP,SMB macro in 1 direction.

only RIPbi don't have equivalent, but maybe can we simply rename it

    'RIP' => [
        "Routing Information Protocol (bidirectional)",
        { action => 'PARAM', proto => 'udp', dport => '520' },
    ],

 


Also, I GUI, I think we should disable proto,sport,dport when a macro is selected, to avoid confusion.



----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com>, "pve-devel" <pve-devel at pve.proxmox.com> 
Envoyé: Dimanche 18 Mai 2014 09:35:57 
Objet: RE: [pve-devel] bidrectionnal macros ? 

> > But that doesn't make any sense with our firewall, because we choose 
> > the direction of rules (tap-in|tap-out). 
> > So they never can apply both direction. 
> 
> What macros are affected? 
> 
> > (I think it's easier for user to implement 1 rule for in and 1 rule 
> > for out) 


A quick search revealed three macros: 

NTPbi 
RIPbi 
SBMBI 

For my point of view, we can simply remove them for now. Or do you 
think many users will need them?