NETSPOC(1)

NAME
netspoc - network security policy compiler

SYNOPSIS
netspoc input-dir output-dir

netspoc input-file output-dir

DESCRIPTION
The network security compiler takes a policy description recursively from all files in input-dir and places one file for each managed device into output-dir. Alternatively input may be read from a single input-file; this is mainly used for small examples or testing.

OPTIONS
Options may currently only be changed in the source file of netspoc. Controls whether netspoc shows output about different compiler phases and statistics on standard error. Add a comment line before each generated ACL entry. Comments use names of network objects as defined in the topology. Add a comment line before each generated routing entry. Comments use names of network objects as defined in the topology. Gives warning for unused groups and service groups. Allow subnets only if the enclosing network is marked as 'route_hint' or if the subnet is marked as 'subnet_of'. Ignore these names when reading directories:
    CVS and RCS directories CVS working files directory raw for prolog & epilog files Editor backup files: emacs: *~
Abort after this many errors.

AUTHOR
Heinz Knutzen <heinz.knutzen@users.berlios.de>

SEE ALSO
http://netspoc.berlios.de