group command: sanewall-group

5
sanewall-group

sanewall-group

group commands with common options

        group
        with
        rule-params

        group
        end

## Description

The `group` command allows you to group together multiple `client` and `server` commands.

Grouping commands with common options (see rule-params) allows the option values to be checked only once in the generated firewall rather than once per service, making it more efficient.

Nested groups may be used.

## Examples

This:

    interface any world
        client all accept
        server http accept

        # Provide these services to trusted hosts only
        server "ssh telnet" accept src "192.0.2.1 192.0.2.2"

can be replaced to produce a more efficient firewall by this:

    interface any world
        client all accept
        server http accept

        # Provide these services to trusted hosts only
        group with src "192.0.2.1 192.0.2.2"
            server ssh telnet
            server ssh accept
        group end

## See Also

- sanewall
- sanewall.conf
- def-interface
- def-router
- rule-params