nanog mailing list archives
Re: (cisco, or any) acl *reducers* out there?
From: Michael Holstein <michael.holstein () csuohio edu>
Date: Thu, 19 Aug 2010 15:31:17 -0400
I'm wondering if anyone has written a parser which can construct rule-trees and get rid of the cruft, unusable, order-misorder and other issues in a large ACL pool?
fwbuilder (www.fwbuilder.org) can import Cisco ACLs and impart a checkpoint-esque rule tree for you to look at, change, and test .. then recompile back into ACL syntax. Also works on IPtables, PF, and a few other things. Cheers, Michael Holstein Cleveland State University
Current thread:
- Re: (cisco, or any) acl *reducers* out there?, (continued)
- Re: (cisco, or any) acl *reducers* out there? Dobbins, Roland (Aug 18)
- Re: (cisco, or any) acl *reducers* out there? Christopher Morrow (Aug 18)
- Re: (cisco, or any) acl *reducers* out there? Randy Bush (Aug 18)
- Re: (cisco, or any) acl *reducers* out there? George Michaelson (Aug 18)
- Re: (cisco, or any) acl *reducers* out there? Randy Bush (Aug 18)
- Re: (cisco, or any) acl *reducers* out there? George Michaelson (Aug 18)
- Re: (cisco, or any) acl *reducers* out there? George Michaelson (Aug 18)
- Re: (cisco, or any) acl *reducers* out there? Dobbins, Roland (Aug 18)
- Re: (cisco, or any) acl *reducers* out there? Cat Okita (Aug 19)
- Re: (cisco, or any) acl *reducers* out there? Christopher Morrow (Aug 19)
- Re: (cisco, or any) acl *reducers* out there? Cat Okita (Aug 19)
- Re: (cisco, or any) acl *reducers* out there? Christopher Morrow (Aug 19)
- Re: (cisco, or any) acl *reducers* out there? Christopher Morrow (Aug 19)