search for: doaccept

...ctant to change the code, for a couple of reasons. It will be hard to avoid unforeseen consequences of changes, and the code would then be incompatible with future releases of Shorewall. Ideas: Wherever Shorewall generates a ''-j ACCEPT'', modify it to something like ''-j DoACCEPT''. Then create a new chain DoAccept. In the simplest case, this would have one rule: ''ACCEPT all packets''. You could then, in /etc/shorewall, add a new file, say ''accepting''. The user could then add any rules that he wanted to apply immediately before...