Re: How to run firehol from within a container?

Phil Whineray <[email protected]> Mon, 28 Jan 2019 07:15:29 +0000
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <20190128071529.GA20848@xps>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