NAME
nuaclgen - NUFW acl generator
SYNOPSIS
nuaclgen [ --Schema eq|ineq ] [ --Aclname ACLDN ] [ --saddr NETWORK1 ]
[ --daddr NETWORK2 ] [ --proto PROTONUMBER ] [ --sport P1[:P2] ] [
--dport P3[:P4] ] [ --OsName OSNAME ] [ --OsVersion OSVERSION ] [
--OsRelease OSRELEASE ] [ --AppName APPLICATION NAME ] [ --AppSig
APPLICATION SIGNATURE ] [ --Separator SEPARATOR ] [ --jump
[ACCEPT|DROP] ] [ --groups GROUPLIST ]
nuaclgen [ --List ] [ --groups Id Group ]
nuaclgen [ --Delete DN ]
nuaclgen [ --help ]
DESCRIPTION
This manual page documents the nuaclgen command.
nuaclgen is an Access control list generator for the ldap backend of
Nuauth, the authentication server of the NUFW package.
Original packaging and informations and help can be found from
http://www.nufw.org/
OPTIONS
--Schema eq|ineq
Use equality schema or not (Equality schema requires dport be
specified, and is the default.
--AclName Acl DN
Add an acl in the ldap tree with dn Acl DN
--saddr Network
Specify source network for the acl, with network of the form :
aaa.bbb.ccc.ddd[/ee]. Default value : 0.0.0.0/0
--daddr Network
Specify destination network for the acl, with network of the
form : aaa.bbb.ccc.ddd[/ee]. Default value : 0.0.0.0/0
--proto Protocol number
Specify protocol type for the acl
--sport Source port
Specify source port(s) for the Acl. NNNN:MMMM can be used to
specify a port range.
--dport Destination port
Specify destination port(s) for the Acl. NNNN:MMMM can be used
to specify a port range.
--jump Decision
Specify decision for the Acl. Has to be ACCEPT or DROP.
--groups Groups list
Specify the user group(s) on which Acl apply. Must be of the
form : Group1[,Group2[,...]]
--List --group Group ID
List Acls for the Group ID group
--Delete Dn
Deletes the Acl stored in the provided Dn
--help Displays a brief resume of available options and quits
SEE ALSO
nufw(8)
nuauth(8)
AUTHOR
Nuauth was designed and coded by Eric Leblond, aka Regit
(<eric@regit.org>) , and Vincent Deffontaines, aka gryzor
(<vincent@gryzor.com>). Original idea in 2001, while working on NSM
Ldap support.
This manual page was written by Eric Leblond and copyrighted by INL
(2003-2005)
Permission is granted to copy, distribute and/or modify this document
under the terms of the GNU Free Documentation License, Version 2 as
published by the Free Software Foundation; with no Invariant Sections,
no Front-Cover Texts and no Back-Cover Texts.
12 mars 2007