Lines Matching defs:policy
1 /* Shared library add-on to iptables to add policy support. */
27 "policy v%s options:\n"
28 " --dir in|out match policy applied during decapsulation/\n"
29 " policy to be applied during encapsulation\n"
30 " --pol none|ipsec match policy\n"
31 " --strict match entire policy instead of single element\n"
39 " --next begin next element in policy\n",
116 exit_error(PARAMETER_PROBLEM, "policy match: invalid policy `%s'", s);
125 exit_error(PARAMETER_PROBLEM, "policy match: invalid mode `%s'", s);
145 "policy match: double --dir option");
148 "policy match: can't invert --dir option");
155 "policy match: can't invert --policy option");
162 "policy match: double --strict option");
166 "policy match: can't invert --strict option");
173 "policy match: double --reqid option");
182 "policy match: double --spi option");
191 "policy match: double --tunnel-src option");
196 "policy match: name resolves to multiple IPs");
206 "policy match: double --tunnel-dst option");
211 "policy match: name resolves to multiple IPs");
221 "policy match: double --proto option");
227 "policy match: protocol must ah/esp/ipcomp");
234 "policy match: double --mode option");
244 "policy match: can't invert --next option");
248 "policy match: maximum policy depth reached");
266 "policy match: no parameters given");
270 "policy match: neither --in nor --out specified");
275 "policy match: policy none but --strict given");
279 "policy match: policy none but policy given");
285 "policy match: multiple elements but no --strict");
294 "policy match: empty policy element");
300 "policy match: --tunnel-src/--tunnel-dst "
397 printf("policy match ");
419 struct iptables_match policy = {
420 .name = "policy",
435 register_match(&policy);