On Fri, Jan 26, 2018 at 02:45:49PM +0100, Pablo Neira Ayuso wrote: [...] > 2) Probably even cleaner is to look at 'local' scopes like in bash. > > define local IP1 = 1.1.1.1 > > so the symbol is bound to this file - consider the content of a file > determines a given scope. This can be also useful to the nested > notation. Actually, this would have different semantics to what bash offers, since local variable are bound to the scope. In the flat notation, there's one single scope for all of your ruleset. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html