Re: Creating a custom rejection chain with firehol

Carlos Ferreira <[email protected]> Sun, 11 Jun 2017 21:20:03 +0100
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <CAJpYY6UVtqK3=E-5Hu34wTLp-62fKygFi8oDYX2DX8=rnV+DfQ@mail.gmail.com>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