Is there provision for incremental configuration in shorewall?

Question

I did not find any provision for incremental configuration in Shorewall. Is there such a mechanism?

What I am looking for is the ability to add configuration files (for rules for instance) in a (again, as an example) /etc/shorewall/rules.d folder - which would be parsed in addition to /etc/shorewall/rules.

Such a functionality would help a lot with dynamic configurations where some elements are added/removed as a whole (I have the case of containers which I add and remove in a script and would prefer to handle firewall changes via an addition or removal of files, as opposed to parse one monolithic file)

Answer 1

Thanks to an article about shorewall configuration I discovered the INCLUDE directive which is well documented.

While it is not possible to directly INCLUDE wildcard files, the documentation explains how to do it:

Example (include all of the files ending in ".rules" in a directory:):

(...)

SHELL cat /etc/shorewall/rules.d/*.rules