nested object-group service

[brlacasse]

Is it possible to use 'tcp-udp' as the service type to list tcp and udp ports within the port-object subcommand? For example, I have pcanywhere 5631tcp and 5632udp and various of other ports i'd like to nest within one service group.

And if so, what would be the proper syntax.

thanks,

[grant.maynard]

no, an object group can be all TCP, or all UDP, or TCP-UDP which means both. But you can't mix them - you can only nest TCP object groups within TCP object groups, etc.

I wish that you could.