Re: Question about iptable's comments

On 10/23/20 5:56 PM, Leroy Tennison wrote:
> now I'm wondering if I can extend that to something like

You probably can.

I think I would not do that.  Primarily because you are effectively 
adding additional processing for the sole purpose of providing a comment 
to the human.

I think I would be more inclined to add a note "See rule description 
<some-custom-rule-identifier.txt> in /etc/iptables/rules.d." or 
something like that.

So you still have a single rule with a concise pointer to a free form 
text file that you can be as verbose as you want to.

To each their own.



-- 
Grant. . . .
unix || die