I had thoughts on this functionality/syntax some time
ago. At the time it seemed to me that the best
approach, syntax wise, is the one that bind 9 uses for
for views.

http://www.bind9.net/manual/bind/9.3...tement_grammar

view view_name
[class] {
match-clients { address_match_list } ;
match-destinations { address_match_list } ;
match-recursive-only yes_or_no ;
[ view_option; ...]
[ zone_statement; ...]
};

Frankly, the brackets rock when it comes to readability,
for one thing they allow various matches to apply to
blocks of statements. You could even allow nesting
if you liked.

You still need semantics, first match, etc.

Regards,

Karl
Free Software: "You don't pay back, you pay forward."
-- Robert A. Heinlein

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://www.mindrot.org/mailman/listi...enssh-unix-dev