Lines Matching defs:policy
1 /* Shared library add-on to iptables to add policy support. */
28 "policy v%s options:\n"
29 " --dir in|out match policy applied during decapsulation/\n"
30 " policy to be applied during encapsulation\n"
31 " --pol none|ipsec match policy\n"
32 " --strict match entire policy instead of single element\n"
40 " --next begin next element in policy\n",
155 exit_error(PARAMETER_PROBLEM, "policy match: invalid policy `%s'", s);
164 exit_error(PARAMETER_PROBLEM, "policy match: invalid mode `%s'", s);
184 "policy match: double --dir option");
187 "policy match: can't invert --dir option");
194 "policy match: can't invert --policy option");
201 "policy match: double --strict option");
205 "policy match: can't invert --strict option");
212 "policy match: double --reqid option");
221 "policy match: double --spi option");
230 "policy match: double --tunnel-src option");
235 "policy match: name resolves to multiple IPs");
245 "policy match: double --tunnel-dst option");
250 "policy match: name resolves to multiple IPs");
260 "policy match: double --proto option");
266 "policy match: protocol must ah/esp/ipcomp");
273 "policy match: double --mode option");
283 "policy match: can't invert --next option");
287 "policy match: maximum policy depth reached");
305 "policy match: no parameters given");
309 "policy match: neither --in nor --out specified");
314 "policy match: policy none but --strict given");
318 "policy match: policy none but policy given");
324 "policy match: multiple elements but no --strict");
333 "policy match: empty policy element");
339 "policy match: --tunnel-src/--tunnel-dst "
436 printf("policy match ");
460 struct ip6tables_match policy = {
461 .name = "policy",
476 register_match6(&policy);