I did not find any provision for incremental configuration in Shorewall. Is there such a mechanism?
What I am looking for is the ability to add configuration files (for rules for instance) in a (again, as an example) /etc/shorewall/rules.d
folder - which would be parsed in addition to /etc/shorewall/rules
.
Such a functionality would help a lot with dynamic configurations where some elements are added/removed as a whole (I have the case of containers which I add and remove in a script and would prefer to handle firewall changes via an addition or removal of files, as opposed to parse one monolithic file)