puffy 0.1.0 → 0.2.0

data/lib/puffy/parser.tab.rb

@@ -1,6 +1,6 @@
 #
 # DO NOT MODIFY!!!!
-# This file is automatically generated by Racc 1.5.2
+# This file is automatically generated by Racc 1.6.0
 # from Racc grammar file "".
 #
 
@@ -8,12 +8,13 @@ require 'racc/parser.rb'
 
 
 require 'deep_merge'
+require 'ipaddr'
 require 'strscan'
 
 module Puffy
   class Parser < Racc::Parser
 
-module_eval(<<'...end parser.y/module_eval...', 'parser.y', 191)
+module_eval(<<'...end parser.y/module_eval...', 'parser.y', 165)
 
   attr_accessor :yydebug
   attr_reader :policy, :filename
@@ -33,6 +34,7 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 191)
   end
 
   def parse(text)
+    @filename ||= '<stdin>'
     @lineno = 1
     s = StringScanner.new(text)
 
@@ -61,11 +63,6 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 191)
           end
           n += 1
         end
-      when s.scan(/=/) then         emit('=', s.matched)
-      when s.scan(/:/) then         emit(':', s.matched)
-      when s.scan(/,/) then         emit(',', s.matched)
-      when s.scan(/{/) then         emit('{', s.matched)
-      when s.scan(/}/) then         emit('}', s.matched)
       when s.scan(/service\b/) then emit(:SERVICE, s.matched)
       when s.scan(/client\b/) then  emit(:CLIENT, s.matched)
       when s.scan(/server\b/) then  emit(:SERVER, s.matched)
@@ -99,12 +96,22 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 191)
       when s.scan(/port\b/) then    emit(:PORT, s.matched)
       when s.scan(/nat-to\b/) then  emit(:NAT_TO, s.matched)
       when s.scan(/rdr-to\b/) then  emit(:RDR_TO, s.matched)
+      when s.scan(/srv\b/) then     emit(:SRV, s.matched)
+      when s.scan(/apt-mirror\b/) then emit(:APT_MIRROR, s.matched)
 
       when s.scan(/\d+\.\d+\.\d+\.\d+(\/\d+)?/) && ip = ipaddress?(s) then           emit(:ADDRESS, ip, s.matched_size)
       when s.scan(/[[:xdigit:]]*:[:[:xdigit:]]+(\/\d+)?/) && ip = ipaddress?(s) then emit(:ADDRESS, ip, s.matched_size)
 
       when s.scan(/\d+/) then      emit(:INTEGER, s.matched.to_i, s.matched_size)
       when s.scan(/\w[\w-]+/) then emit(:IDENTIFIER, s.matched)
+
+      when s.scan(/=/) then         emit('=', s.matched)
+      when s.scan(/:/) then         emit(':', s.matched)
+      when s.scan(/,/) then         emit(',', s.matched)
+      when s.scan(/{/) then         emit('{', s.matched)
+      when s.scan(/}/) then         emit('}', s.matched)
+      when s.scan(/\(/) then        emit('(', s.matched)
+      when s.scan(/\)/) then        emit(')', s.matched)
       else
         raise SyntaxError.new('Syntax error', { filename: @filename, lineno: @lineno, position: @position, line: @line })
       end
@@ -114,7 +121,7 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 191)
     begin
       do_parse
     rescue Racc::ParseError => e
-      raise ParseError.new("Parse error: unexpected token: #{@current_token[0]}", @current_token[1].merge(filename: @filename))
+      raise ParseError.new("Parse error: unexpected token: #{@current_token[0]}", @current_token[1])
     end
   end
 
@@ -130,6 +137,7 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 191)
       line: @line,
       lineno: @lineno,
       position: @position,
+      filename: @filename,
       length: length,
     }
     @tokens << [token, exvalue]
@@ -195,244 +203,263 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 191)
   def policy_for(hostname)
     prefered_value_for_hostname(@saved_policies, hostname) || @default_policy || :block
   end
+
+  def constraint_service_to_hosts(service, hosts)
+    result = @services.fetch(service).deep_dup
+    result.map! do |item|
+      item[:from] = if item[:from]
+        item[:from].product(hosts.fetch(:from, [{}])).map { |parts| parts[0].merge(parts[1].compact) }
+      else
+        hosts.fetch(:from, [{}])
+      end
+
+      item[:to] = if item[:to]
+        item[:to].product(hosts.fetch(:to, [{}])).map { |parts| parts[0].merge(parts[1].compact) }
+      else
+        hosts.fetch(:to, [{}])
+      end
+
+      item
+    end
+    result
+  end
 ...end parser.y/module_eval...
 ##### State transition tables begin ###
 
 racc_action_table = [
-   132,   132,   129,   132,   132,    24,   153,   154,   162,    74,
-    10,    25,    26,   107,    33,   107,   110,   111,   110,   111,
-   140,    15,    34,   110,   111,    17,   115,   116,    76,    77,
-    19,    18,   131,   131,    21,   131,   131,    22,   164,   165,
-   106,   109,   106,   109,    76,    77,    49,   139,   142,    89,
-    90,    91,    38,    47,    48,    50,    51,    49,    25,    26,
-    39,    30,    31,    67,    47,    48,    50,    51,    49,    25,
-    26,    66,    27,     9,    69,    47,    48,    50,    51,    49,
-    25,    26,    68,    62,     9,    38,    47,    48,    50,    51,
-    49,    25,    26,    39,    89,    90,    91,    47,    48,    50,
-    51,    49,    25,    26,    21,    30,    31,    22,    47,    48,
-    50,    51,    49,    25,    26,    59,    60,    30,    31,    47,
-    48,    50,    51,    49,    25,    26,    21,    76,    77,    22,
-    47,    48,    50,    51,    49,    25,    26,   133,   134,   110,
-   111,    47,    48,    50,    51,    49,    25,    26,   160,   134,
-   110,   111,    47,    48,    50,    51,    49,    25,    26,    89,
-    90,    91,    78,    47,    48,    50,    51,    49,    25,    26,
-    89,    90,    91,    96,    47,    48,    50,    51,    49,    25,
-    26,   150,    99,   148,   100,    47,    48,    50,    51,     6,
-    25,    26,     6,   110,   111,     6,     7,     8,     6,     7,
-     8,     9,     7,     8,     9,     7,     8,     9,     6,   101,
-     9,    54,    55,    17,    21,     7,     8,    22,    17,    18,
-     9,    17,    28,   102,    18,    30,    31,    18,   150,   124,
-   125,   166,   167,    76,    77,   110,   111,   110,   111,   164,
-   165,   103,   104,   114,   119,   119,   126,   128,   137,   145,
-   119,   156,   150,   170,   171,   150,   173,   174 ]
+   133,   133,   130,   133,   133,    33,   154,   155,   166,    21,
+    74,     6,    22,    34,   119,   120,    17,   109,     7,     8,
+   114,   115,    18,     9,   109,    30,    31,   114,   115,    76,
+    77,   109,    76,    77,   114,   115,   132,   132,    21,   132,
+   132,    22,   168,   169,   106,   110,   111,    38,    10,   112,
+   113,   106,   110,   111,    67,    39,   112,   113,   106,   110,
+   111,    49,    66,   112,   113,    30,    31,    69,    47,    48,
+    50,    51,    49,    25,    26,    68,    76,    77,    38,    47,
+    48,    50,    51,    49,    25,    26,    39,   161,     9,   159,
+    47,    48,    50,    51,    49,    25,    26,   114,   115,     9,
+    15,    47,    48,    50,    51,    49,    25,    26,    59,    60,
+    30,    31,    47,    48,    50,    51,    49,    25,    26,   140,
+   141,   114,   115,    47,    48,    50,    51,    49,    25,    26,
+    89,    90,    91,    27,    47,    48,    50,    51,    49,    25,
+    26,    89,    90,    91,    62,    47,    48,    50,    51,    49,
+    25,    26,    89,    90,    91,    78,    47,    48,    50,    51,
+    49,    25,    26,    89,    90,    91,    96,    47,    48,    50,
+    51,    49,    25,    26,   135,   136,    76,    77,    47,    48,
+    50,    51,    49,    25,    26,   114,   115,   168,   169,    47,
+    48,    50,    51,    49,    25,    26,    99,   100,   101,   102,
+    47,    48,    50,    51,     6,    25,    26,     6,   103,   104,
+     6,     7,     8,     6,     7,     8,     9,     7,     8,     9,
+     7,     8,     9,    19,   118,     9,    24,    21,    54,    55,
+    22,    21,    25,    26,    22,    17,    17,    17,   122,   113,
+   113,    18,    18,    18,    28,   113,   161,    30,    31,   170,
+   171,   128,   129,   137,   143,   144,   147,   149,   113,   152,
+   153,   157,   161,   174,   175,   161,   177,   178 ]
 
 racc_action_check = [
-   119,   129,   119,   143,   154,     9,   143,   143,   157,    52,
-     1,     9,     9,    89,    16,    90,    89,    89,    90,    90,
-   128,     6,    16,   128,   128,     7,    97,    97,    52,    52,
-     8,     7,   119,   129,     8,   143,   154,     8,   157,   157,
-    89,    89,    90,    90,    97,    97,    33,   128,   128,    70,
-    70,    70,    20,    33,    33,    33,    33,    34,    33,    33,
-    20,    28,    28,    47,    34,    34,    34,    34,    38,    34,
-    34,    47,    10,    38,    48,    38,    38,    38,    38,    39,
-    38,    38,    48,    43,    39,    54,    39,    39,    39,    39,
-    44,    39,    39,    54,    71,    71,    71,    44,    44,    44,
-    44,    45,    44,    44,    19,    60,    60,    19,    45,    45,
-    45,    45,    46,    45,    45,    41,    41,    41,    41,    46,
-    46,    46,    46,    57,    46,    46,    55,    74,    74,    55,
-    57,    57,    57,    57,    58,    57,    57,   120,   120,   120,
-   120,    58,    58,    58,    58,    66,    58,    58,   152,   152,
-   152,   152,    66,    66,    66,    66,    67,    66,    66,    72,
-    72,    72,    53,    67,    67,    67,    67,    68,    67,    67,
-   136,   136,   136,    73,    68,    68,    68,    68,    69,    68,
-    68,   137,    81,   137,    82,    69,    69,    69,    69,     0,
-    69,    69,     2,   107,   107,     3,     0,     0,     4,     2,
-     2,     0,     3,     3,     2,     4,     4,     3,     5,    84,
-     4,    35,    35,    49,    35,     5,     5,    35,    50,    49,
-     5,    51,    15,    85,    50,    15,    15,    51,   158,   113,
-   113,   158,   158,   116,   116,   134,   134,   140,   140,   162,
-   162,    86,    87,    95,   105,   112,   114,   118,   123,   131,
-   138,   145,   148,   164,   165,   167,   170,   173 ]
+   113,   130,   113,   145,   155,    16,   145,   145,   163,    19,
+    52,     0,    19,    16,    97,    97,     7,    89,     0,     0,
+    89,    89,     7,     0,    90,    28,    28,    90,    90,    52,
+    52,   122,    97,    97,   122,   122,   113,   130,    55,   145,
+   155,    55,   163,   163,    89,    89,    89,    20,     1,    89,
+    89,    90,    90,    90,    47,    20,    90,    90,   122,   122,
+   122,    33,    47,   122,   122,    60,    60,    48,    33,    33,
+    33,    33,    34,    33,    33,    48,    74,    74,    54,    34,
+    34,    34,    34,    38,    34,    34,    54,   149,    38,   149,
+    38,    38,    38,    38,    39,    38,    38,   109,   109,    39,
+     6,    39,    39,    39,    39,    44,    39,    39,    41,    41,
+    41,    41,    44,    44,    44,    44,    45,    44,    44,   125,
+   125,   125,   125,    45,    45,    45,    45,    46,    45,    45,
+    70,    70,    70,    10,    46,    46,    46,    46,    57,    46,
+    46,    71,    71,    71,    43,    57,    57,    57,    57,    58,
+    57,    57,    72,    72,    72,    53,    58,    58,    58,    58,
+    66,    58,    58,   148,   148,   148,    73,    66,    66,    66,
+    66,    67,    66,    66,   117,   117,   120,   120,    67,    67,
+    67,    67,    68,    67,    67,   141,   141,   166,   166,    68,
+    68,    68,    68,    69,    68,    68,    81,    82,    84,    85,
+    69,    69,    69,    69,     2,    69,    69,     3,    86,    87,
+     4,     2,     2,     5,     3,     3,     2,     4,     4,     3,
+     5,     5,     4,     8,    95,     5,     9,     8,    35,    35,
+     8,    35,     9,     9,    35,    49,    50,    51,   105,   106,
+   107,    49,    50,    51,    15,   110,   164,    15,    15,   164,
+   164,   111,   112,   118,   128,   129,   132,   134,   140,   143,
+   144,   147,   159,   168,   169,   171,   174,   177 ]
 
 racc_action_pointer = [
-   187,    10,   190,   193,   196,   206,    18,    23,    26,   -10,
-    72,   nil,   nil,   nil,   nil,   218,    10,   nil,   nil,    96,
-    48,   nil,   nil,   nil,   nil,   nil,   nil,   nil,    54,   nil,
-   nil,   nil,   nil,    37,    48,   206,   nil,   nil,    59,    70,
-   nil,   110,   nil,    78,    81,    92,   103,    59,    70,   211,
-   216,   219,     5,   149,    81,   118,   nil,   114,   125,   nil,
-    98,   nil,   nil,   nil,   nil,   nil,   136,   147,   158,   169,
-    21,    66,   131,   158,   104,   nil,   nil,   nil,   nil,   nil,
-   nil,   177,   171,   nil,   196,   218,   228,   237,   nil,     9,
-    11,   nil,   nil,   nil,   nil,   223,   nil,    21,   nil,   nil,
-   nil,   nil,   nil,   nil,   nil,   211,   nil,   186,   nil,   nil,
-   nil,   nil,   212,   204,   238,   nil,   210,   nil,   218,    -2,
-   132,   nil,   nil,   221,   nil,   nil,   nil,   nil,    16,    -1,
-   nil,   214,   nil,   nil,   228,   nil,   142,   179,   217,   nil,
-   230,   nil,   nil,     1,   nil,   217,   nil,   nil,   250,   nil,
-   nil,   nil,   143,   nil,     2,   nil,   nil,     2,   226,   nil,
-   nil,   nil,   203,   nil,   246,   247,   nil,   253,   nil,   nil,
-   223,   nil,   nil,   223,   nil ]
+     9,    48,   202,   205,   208,   211,    97,    14,   219,   211,
+   133,   nil,   nil,   nil,   nil,   240,     1,   nil,   nil,     1,
+    43,   nil,   nil,   nil,   nil,   nil,   nil,   nil,    18,   nil,
+   nil,   nil,   nil,    52,    63,   223,   nil,   nil,    74,    85,
+   nil,   103,   nil,   139,    96,   107,   118,    50,    63,   233,
+   234,   235,     6,   142,    74,    30,   nil,   129,   140,   nil,
+    58,   nil,   nil,   nil,   nil,   nil,   151,   162,   173,   184,
+   102,   113,   124,   151,    53,   nil,   nil,   nil,   nil,   nil,
+   nil,   191,   184,   nil,   185,   194,   195,   204,   nil,    13,
+    20,   nil,   nil,   nil,   nil,   204,   nil,     9,   nil,   nil,
+   nil,   nil,   nil,   nil,   nil,   209,   202,   203,   nil,    90,
+   208,   217,   218,    -2,   nil,   nil,   nil,   149,   245,   nil,
+   153,   nil,    27,   nil,   nil,   114,   nil,   nil,   246,   247,
+    -1,   nil,   217,   nil,   230,   nil,   nil,   nil,   nil,   nil,
+   221,   178,   nil,   224,   225,     1,   nil,   223,   135,    85,
+   nil,   nil,   nil,   nil,   nil,     2,   nil,   nil,   nil,   260,
+   nil,   nil,   nil,     2,   244,   nil,   147,   nil,   256,   257,
+   nil,   263,   nil,   nil,   229,   nil,   nil,   229,   nil ]
 
 racc_action_default = [
-    -5,  -102,    -5,    -5,    -5,    -5,  -102,  -102,  -102,  -102,
-  -102,    -1,    -2,    -3,    -4,  -102,  -102,   -14,   -15,  -102,
-  -102,   -21,   -22,   -32,   -33,   -46,   -47,   175,  -102,    -7,
-   -11,   -12,   -13,   -31,   -31,  -102,   -20,   -17,   -31,   -31,
-   -25,  -102,   -10,  -102,   -31,   -31,   -31,  -102,  -102,  -102,
-  -102,  -102,   -48,  -102,  -102,  -102,   -19,   -31,   -31,    -6,
-  -102,    -9,   -26,   -28,   -29,   -30,   -31,   -31,   -31,   -31,
-   -71,   -71,   -71,   -43,  -102,   -50,   -54,   -55,   -27,   -16,
-   -18,  -102,  -102,    -8,  -102,  -102,  -102,  -102,   -38,   -76,
-   -76,   -69,   -70,   -39,   -40,   -44,   -42,  -102,   -53,   -23,
-   -24,   -34,   -35,   -36,   -37,   -84,   -72,  -102,   -74,   -75,
-   -91,   -92,   -84,   -56,  -102,   -49,  -102,   -52,   -67,  -102,
-  -102,   -95,   -68,   -59,   -57,   -58,   -45,   -51,   -81,  -102,
-   -83,   -88,   -89,   -73,  -102,   -94,  -102,  -102,   -84,   -77,
-  -102,   -79,   -80,  -102,   -87,  -102,   -93,   -98,  -102,   -61,
-   -65,   -66,  -102,   -82,  -102,   -86,   -90,   -41,  -102,   -64,
-   -78,   -85,  -102,   -97,  -102,  -102,   -60,  -102,   -63,   -96,
-  -100,  -101,   -62,  -102,   -99 ]
+    -5,   -99,    -5,    -5,    -5,    -5,   -99,   -99,   -99,   -99,
+   -99,    -1,    -2,    -3,    -4,   -99,   -99,   -14,   -15,   -99,
+   -99,   -21,   -22,   -32,   -33,   -46,   -47,   179,   -99,    -7,
+   -11,   -12,   -13,   -31,   -31,   -99,   -20,   -17,   -31,   -31,
+   -25,   -99,   -10,   -99,   -31,   -31,   -31,   -99,   -99,   -99,
+   -99,   -99,   -48,   -99,   -99,   -99,   -19,   -31,   -31,    -6,
+   -99,    -9,   -26,   -28,   -29,   -30,   -31,   -31,   -31,   -31,
+   -71,   -71,   -71,   -43,   -99,   -50,   -54,   -55,   -27,   -16,
+   -18,   -99,   -99,    -8,   -99,   -99,   -99,   -99,   -38,   -81,
+   -81,   -69,   -70,   -39,   -40,   -44,   -42,   -99,   -53,   -23,
+   -24,   -34,   -35,   -36,   -37,   -67,   -81,   -81,   -74,   -99,
+   -81,   -99,   -99,   -99,   -88,   -89,   -68,   -56,   -99,   -49,
+   -99,   -52,   -81,   -72,   -73,   -99,   -92,   -76,   -99,   -99,
+   -99,   -80,   -85,   -86,   -59,   -57,   -58,   -45,   -51,   -66,
+   -81,   -99,   -91,   -99,   -99,   -99,   -84,   -99,   -99,   -99,
+   -75,   -90,   -77,   -78,   -79,   -99,   -83,   -87,   -95,   -99,
+   -61,   -65,   -82,   -41,   -99,   -64,   -99,   -94,   -99,   -99,
+   -60,   -99,   -63,   -93,   -97,   -98,   -62,   -99,   -96 ]
 
 racc_goto_table = [
-    75,    20,   121,   130,    29,    37,   163,   120,    16,    53,
-    41,   169,    36,   144,    53,   135,    32,    42,    35,    63,
-    64,    65,    98,   141,   118,   149,    23,   155,    56,   146,
-    61,   122,    81,    82,    73,   121,   159,    95,   161,    79,
-   152,    84,    85,    86,    87,   117,   168,   135,    80,    83,
-    70,    71,    72,    57,    58,   172,     1,   151,    11,    12,
-    13,    14,   105,   112,   127,    88,    93,    94,   113,   123,
-   136,   147,   157,    97,   158,   138,   143 ]
+    75,    20,   131,    37,    29,   123,   124,    41,    16,   127,
+   160,    32,    36,   105,   116,   167,    35,    42,   173,   146,
+   165,    23,    98,    73,   126,   172,    57,    58,    56,    95,
+    61,    53,   176,   117,   156,   134,    53,    79,   148,   150,
+   142,    63,    64,    65,   162,   121,   139,   158,    80,    83,
+    70,    71,    72,   163,    81,    82,   151,     1,    97,    11,
+    12,    13,    14,    84,    85,    86,    87,   164,   138,    88,
+    93,    94,   125,   145 ]
 
 racc_goto_check = [
-    27,    12,    34,    36,     7,    11,    37,    33,     8,    13,
-     6,    37,    12,    36,    13,    34,     9,     7,    10,    13,
-    13,    13,    27,    34,    31,    29,    17,    36,    12,    34,
-     7,    31,    13,    13,    19,    34,    29,    20,    36,    11,
-    33,    13,    13,    13,    13,    27,    29,    34,    12,     7,
-     8,     8,     8,     4,     4,    29,     1,    31,     1,     1,
-     1,     1,    30,    30,    27,    18,    18,    18,    21,    22,
-    23,    24,    25,    26,    28,    32,    35 ]
+    27,    12,    35,    11,     7,    31,    31,     6,     8,    31,
+    29,     9,    12,    30,    30,    36,    10,     7,    36,    35,
+    29,    17,    27,    19,    32,    29,     4,     4,    12,    20,
+     7,    13,    29,    21,    35,    22,    13,    11,    23,    31,
+    32,    13,    13,    13,    35,    27,    30,    24,    12,     7,
+     8,     8,     8,    25,    13,    13,    32,     1,    26,     1,
+     1,     1,     1,    13,    13,    13,    13,    28,    27,    18,
+    18,    18,    33,    34 ]
 
 racc_goto_pointer = [
-   nil,    56,   nil,   nil,    15,   nil,   -18,   -11,     1,     0,
-    -1,   -15,    -7,   -25,   nil,   nil,   nil,    17,    -5,   -18,
-   -36,   -27,   -44,   -53,   -65,   -75,    -1,   -52,   -74,  -112,
-   -27,   -81,   -53,  -100,  -105,   -53,  -116,  -151 ]
+   nil,    57,   nil,   nil,   -12,   nil,   -21,   -11,     1,    -5,
+    -3,   -17,    -7,    -3,   nil,   nil,   nil,    12,    -1,   -29,
+   -44,   -62,   -82,   -96,  -101,  -105,   -16,   -52,   -92,  -139,
+   -76,  -101,   -85,   -37,   -57,  -111,  -148 ]
 
 racc_goto_default = [
    nil,   nil,     2,     3,     4,     5,   nil,   nil,   nil,    40,
    nil,   nil,   nil,    43,    44,    45,    46,    52,   nil,   nil,
    nil,   nil,   nil,   nil,    92,   nil,   nil,   nil,   nil,   nil,
-   nil,   nil,   nil,   nil,   108,   nil,   nil,   nil ]
+   nil,   108,   107,   nil,   nil,   nil,   nil ]
 
 racc_reduce_table = [
   0, 0, :racc_error,
-  2, 39, :_reduce_none,
-  2, 39, :_reduce_none,
-  2, 39, :_reduce_3,
-  2, 39, :_reduce_none,
-  0, 39, :_reduce_none,
-  5, 40, :_reduce_6,
-  3, 40, :_reduce_7,
-  3, 44, :_reduce_8,
-  2, 44, :_reduce_9,
-  1, 44, :_reduce_10,
-  1, 45, :_reduce_11,
-  1, 45, :_reduce_12,
-  3, 43, :_reduce_13,
-  1, 46, :_reduce_14,
-  1, 46, :_reduce_15,
-  5, 41, :_reduce_16,
-  3, 41, :_reduce_17,
-  3, 48, :_reduce_18,
-  2, 48, :_reduce_19,
-  1, 48, :_reduce_20,
-  1, 50, :_reduce_21,
-  1, 50, :_reduce_22,
-  4, 49, :_reduce_23,
-  4, 49, :_reduce_24,
-  1, 49, :_reduce_25,
-  3, 47, :_reduce_26,
-  3, 47, :_reduce_27,
-  2, 51, :_reduce_28,
-  2, 51, :_reduce_29,
-  2, 51, :_reduce_30,
-  0, 51, :_reduce_31,
-  2, 42, :_reduce_32,
-  2, 42, :_reduce_33,
-  4, 53, :_reduce_34,
-  4, 53, :_reduce_35,
-  4, 54, :_reduce_36,
-  4, 54, :_reduce_37,
-  3, 52, :_reduce_38,
-  3, 52, :_reduce_39,
-  3, 52, :_reduce_40,
-  8, 52, :_reduce_41,
-  1, 58, :_reduce_none,
-  0, 58, :_reduce_none,
-  0, 59, :_reduce_none,
-  2, 59, :_reduce_45,
-  1, 55, :_reduce_46,
-  1, 55, :_reduce_47,
-  0, 57, :_reduce_none,
-  3, 57, :_reduce_49,
-  1, 57, :_reduce_50,
-  3, 64, :_reduce_51,
-  2, 64, :_reduce_52,
-  1, 64, :_reduce_53,
-  1, 65, :_reduce_54,
-  1, 65, :_reduce_55,
-  0, 60, :_reduce_none,
-  1, 60, :_reduce_57,
-  1, 60, :_reduce_58,
+  2, 43, :_reduce_none,
+  2, 43, :_reduce_none,
+  2, 43, :_reduce_3,
+  2, 43, :_reduce_none,
+  0, 43, :_reduce_none,
+  5, 44, :_reduce_6,
+  3, 44, :_reduce_7,
+  3, 48, :_reduce_8,
+  2, 48, :_reduce_9,
+  1, 48, :_reduce_10,
+  1, 49, :_reduce_11,
+  1, 49, :_reduce_12,
+  3, 47, :_reduce_13,
+  1, 50, :_reduce_14,
+  1, 50, :_reduce_15,
+  5, 45, :_reduce_16,
+  3, 45, :_reduce_17,
+  3, 52, :_reduce_18,
+  2, 52, :_reduce_19,
+  1, 52, :_reduce_20,
+  1, 54, :_reduce_21,
+  1, 54, :_reduce_22,
+  4, 53, :_reduce_23,
+  4, 53, :_reduce_24,
+  1, 53, :_reduce_25,
+  3, 51, :_reduce_26,
+  3, 51, :_reduce_27,
+  2, 55, :_reduce_28,
+  2, 55, :_reduce_29,
+  2, 55, :_reduce_30,
+  0, 55, :_reduce_31,
+  2, 46, :_reduce_32,
+  2, 46, :_reduce_33,
+  4, 57, :_reduce_34,
+  4, 57, :_reduce_35,
+  4, 58, :_reduce_36,
+  4, 58, :_reduce_37,
+  3, 56, :_reduce_38,
+  3, 56, :_reduce_39,
+  3, 56, :_reduce_40,
+  8, 56, :_reduce_41,
+  1, 62, :_reduce_none,
+  0, 62, :_reduce_none,
+  0, 63, :_reduce_none,
+  2, 63, :_reduce_45,
+  1, 59, :_reduce_46,
+  1, 59, :_reduce_47,
   0, 61, :_reduce_none,
-  4, 61, :_reduce_60,
-  2, 61, :_reduce_61,
-  3, 66, :_reduce_62,
-  2, 66, :_reduce_63,
-  1, 66, :_reduce_64,
-  1, 67, :_reduce_65,
-  6, 62, :_reduce_66,
-  3, 62, :_reduce_67,
-  3, 62, :_reduce_68,
-  1, 62, :_reduce_69,
-  1, 56, :_reduce_none,
-  0, 56, :_reduce_71,
-  1, 68, :_reduce_72,
-  3, 68, :_reduce_73,
-  1, 68, :_reduce_none,
-  1, 68, :_reduce_75,
-  0, 68, :_reduce_none,
-  1, 70, :_reduce_77,
-  3, 70, :_reduce_78,
-  1, 70, :_reduce_none,
-  1, 70, :_reduce_80,
-  0, 70, :_reduce_none,
-  4, 69, :_reduce_82,
-  2, 69, :_reduce_83,
-  0, 69, :_reduce_none,
-  3, 73, :_reduce_85,
-  2, 73, :_reduce_86,
-  1, 73, :_reduce_87,
+  3, 61, :_reduce_49,
+  1, 61, :_reduce_50,
+  3, 68, :_reduce_51,
+  2, 68, :_reduce_52,
+  1, 68, :_reduce_53,
+  1, 69, :_reduce_54,
+  1, 69, :_reduce_55,
+  0, 64, :_reduce_none,
+  1, 64, :_reduce_57,
+  1, 64, :_reduce_58,
+  0, 65, :_reduce_none,
+  4, 65, :_reduce_60,
+  2, 65, :_reduce_61,
+  3, 70, :_reduce_62,
+  2, 70, :_reduce_63,
+  1, 70, :_reduce_64,
+  1, 71, :_reduce_65,
+  4, 66, :_reduce_66,
+  2, 66, :_reduce_67,
+  2, 66, :_reduce_68,
+  1, 66, :_reduce_69,
+  1, 60, :_reduce_none,
+  0, 60, :_reduce_71,
+  2, 72, :_reduce_72,
+  2, 72, :_reduce_73,
+  1, 72, :_reduce_74,
+  4, 72, :_reduce_75,
+  2, 72, :_reduce_76,
+  4, 72, :_reduce_77,
+  4, 72, :_reduce_78,
+  4, 73, :_reduce_79,
+  2, 73, :_reduce_80,
+  0, 73, :_reduce_none,
+  3, 76, :_reduce_82,
+  2, 76, :_reduce_83,
+  1, 76, :_reduce_84,
+  1, 77, :_reduce_85,
+  1, 77, :_reduce_86,
+  3, 77, :_reduce_87,
   1, 74, :_reduce_88,
   1, 74, :_reduce_89,
-  3, 74, :_reduce_90,
-  1, 72, :_reduce_91,
-  1, 72, :_reduce_92,
-  3, 71, :_reduce_93,
-  2, 71, :_reduce_94,
-  1, 71, :_reduce_95,
-  3, 63, :_reduce_96,
-  2, 63, :_reduce_97,
-  0, 63, :_reduce_98,
-  4, 75, :_reduce_99,
-  2, 75, :_reduce_100,
-  2, 75, :_reduce_101 ]
-
-racc_reduce_n = 102
-
-racc_shift_n = 175
+  3, 75, :_reduce_90,
+  2, 75, :_reduce_91,
+  1, 75, :_reduce_92,
+  3, 67, :_reduce_93,
+  2, 67, :_reduce_94,
+  0, 67, :_reduce_95,
+  4, 78, :_reduce_96,
+  2, 78, :_reduce_97,
+  2, 78, :_reduce_98 ]
+
+racc_reduce_n = 99
+
+racc_shift_n = 179
 
 racc_token_table = {
   false => 0,
@@ -468,13 +495,17 @@ racc_token_table = {
   :ALL => 30,
   :ANY => 31,
   :VARIABLE => 32,
-  :PORT => 33,
-  :INTEGER => 34,
-  ":" => 35,
-  :RDR_TO => 36,
-  :NAT_TO => 37 }
-
-racc_nt_base = 38
+  :SRV => 33,
+  "(" => 34,
+  ")" => 35,
+  :APT_MIRROR => 36,
+  :PORT => 37,
+  :INTEGER => 38,
+  ":" => 39,
+  :RDR_TO => 40,
+  :NAT_TO => 41 }
+
+racc_nt_base = 42
 
 racc_use_result_var = true
 
@@ -528,6 +559,10 @@ Racc_token_to_s_table = [
   "ALL",
   "ANY",
   "VARIABLE",
+  "SRV",
+  "\"(\"",
+  "\")\"",
+  "APT_MIRROR",
   "PORT",
   "INTEGER",
   "\":\"",
@@ -563,11 +598,10 @@ Racc_token_to_s_table = [
   "direction",
   "protocol_list",
   "protocol",
-  "hosts_from",
+  "hosts_host",
   "hosts_port",
-  "hosts_to",
-  "host_list",
   "host",
+  "host_list",
   "port_list",
   "port",
   "filteropt" ]
@@ -593,256 +627,269 @@ module_eval(<<'.,.,', 'parser.y', 4)
 
 # reduce 5 omitted
 
-module_eval(<<'.,.,', 'parser.y', 9)
+module_eval(<<'.,.,', 'parser.y', 8)
   def _reduce_6(val, _values, result)
      @variables[val[0][:value]] = val[3].freeze
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 10)
+module_eval(<<'.,.,', 'parser.y', 9)
   def _reduce_7(val, _values, result)
      @variables[val[0][:value]] = val[2].freeze
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 13)
+module_eval(<<'.,.,', 'parser.y', 11)
   def _reduce_8(val, _values, result)
      result = val[0] + [val[2]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 14)
+module_eval(<<'.,.,', 'parser.y', 12)
   def _reduce_9(val, _values, result)
      result = val[0] + [val[1]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 15)
+module_eval(<<'.,.,', 'parser.y', 13)
   def _reduce_10(val, _values, result)
      result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 18)
+module_eval(<<'.,.,', 'parser.y', 15)
   def _reduce_11(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 19)
+module_eval(<<'.,.,', 'parser.y', 16)
   def _reduce_12(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 22)
+module_eval(<<'.,.,', 'parser.y', 18)
   def _reduce_13(val, _values, result)
      @services[val[1]] = val[2]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 25)
+module_eval(<<'.,.,', 'parser.y', 20)
   def _reduce_14(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 26)
+module_eval(<<'.,.,', 'parser.y', 21)
   def _reduce_15(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 29)
+module_eval(<<'.,.,', 'parser.y', 23)
   def _reduce_16(val, _values, result)
-     @nodes[val[2]] = val[4]; @saved_policies[val[2]] = @policy
+     val[2].each { |name| @nodes[name] = val[4]; @saved_policies[name] = @policy }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 30)
+module_eval(<<'.,.,', 'parser.y', 24)
   def _reduce_17(val, _values, result)
      @nodes[val[1]] = val[2]; @saved_policies[val[1]] = @policy
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 33)
+module_eval(<<'.,.,', 'parser.y', 26)
   def _reduce_18(val, _values, result)
      result = val[0] + [val[2]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 34)
+module_eval(<<'.,.,', 'parser.y', 27)
   def _reduce_19(val, _values, result)
      result = val[0] + [val[1]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 35)
+module_eval(<<'.,.,', 'parser.y', 28)
   def _reduce_20(val, _values, result)
      result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 38)
+module_eval(<<'.,.,', 'parser.y', 30)
   def _reduce_21(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 39)
+module_eval(<<'.,.,', 'parser.y', 31)
   def _reduce_22(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 42)
+module_eval(<<'.,.,', 'parser.y', 33)
   def _reduce_23(val, _values, result)
      @policy = val[1]; result = val[2]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 43)
+module_eval(<<'.,.,', 'parser.y', 34)
   def _reduce_24(val, _values, result)
      @policy = val[1]; result = val[2]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 44)
+module_eval(<<'.,.,', 'parser.y', 35)
   def _reduce_25(val, _values, result)
      @policy = nil; result = val[0]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 47)
+module_eval(<<'.,.,', 'parser.y', 37)
   def _reduce_26(val, _values, result)
      result = val[1].freeze
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 48)
+module_eval(<<'.,.,', 'parser.y', 38)
   def _reduce_27(val, _values, result)
      result = val[1].freeze
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 51)
+module_eval(<<'.,.,', 'parser.y', 40)
   def _reduce_28(val, _values, result)
      result = val[0] + val[1]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 52)
+module_eval(<<'.,.,', 'parser.y', 41)
   def _reduce_29(val, _values, result)
      result = val[0] + val[1]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 53)
+module_eval(<<'.,.,', 'parser.y', 42)
   def _reduce_30(val, _values, result)
      result = val[0] + val[1]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 54)
+module_eval(<<'.,.,', 'parser.y', 43)
   def _reduce_31(val, _values, result)
      result = []
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 57)
+module_eval(<<'.,.,', 'parser.y', 45)
   def _reduce_32(val, _values, result)
      result = val[1][:action]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 58)
+module_eval(<<'.,.,', 'parser.y', 46)
   def _reduce_33(val, _values, result)
      result = 'log'
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 61)
+module_eval(<<'.,.,', 'parser.y', 48)
   def _reduce_34(val, _values, result)
      result = val[2].reject { |x| x[:af] == :inet6 }.map { |x| x[:af] = :inet ; x }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 62)
+module_eval(<<'.,.,', 'parser.y', 49)
   def _reduce_35(val, _values, result)
      result = val[2].reject { |x| x[:af] == :inet6 }.map { |x| x[:af] = :inet ; x }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 65)
+module_eval(<<'.,.,', 'parser.y', 51)
   def _reduce_36(val, _values, result)
      result = val[2].reject { |x| x[:af] == :inet }.map { |x| x[:af] = :inet6 ; x }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 66)
+module_eval(<<'.,.,', 'parser.y', 52)
   def _reduce_37(val, _values, result)
      result = val[2].reject { |x| x[:af] == :inet }.map { |x| x[:af] = :inet6 ; x }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 69)
+module_eval(<<'.,.,', 'parser.y', 55)
   def _reduce_38(val, _values, result)
-     result = @services.fetch(val[1]).deep_dup.map { |x| x.merge(val[2]) }
+                 begin
+               result = constraint_service_to_hosts(val[1], val[2])
+             rescue KeyError
+               raise ParseError.new("Parse error: service \"#{val[1]}\" is not defined", val[0])
+             end
+
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 71)
+module_eval(<<'.,.,', 'parser.y', 62)
   def _reduce_39(val, _values, result)
-                 raise "service #{val[1]} cannot be used as client" if @services.fetch(val[1]).map { |x| x[:dir] }.compact.any?
-             result = @services.fetch(val[1]).deep_dup.map { |x| x.merge(dir: :out).deep_merge(val[2]) }
+                 begin
+               raise "service #{val[1]} cannot be used as client" if @services.fetch(val[1]).map { |x| x[:dir] }.compact.any?
+               result = constraint_service_to_hosts(val[1], val[2]).map { |item| item.merge(dir: :out) }
+             rescue KeyError
+               raise ParseError.new("Parse error: service \"#{val[1]}\" is not defined", val[0])
+             end
 
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 75)
+module_eval(<<'.,.,', 'parser.y', 70)
   def _reduce_40(val, _values, result)
-                 raise "service #{val[1]} cannot be used as server" if @services.fetch(val[1]).map { |x| x[:dir] }.compact.any?
-             result = @services.fetch(val[1]).deep_dup.map { |x| x.merge(dir: :in).deep_merge(val[2]) }
+                 begin
+               raise "service #{val[1]} cannot be used as server" if @services.fetch(val[1]).map { |x| x[:dir] }.compact.any?
+               result = constraint_service_to_hosts(val[1], val[2]).map { |item| item.merge(dir: :in) }
+             rescue KeyError
+               raise ParseError.new("Parse error: service \"#{val[1]}\" is not defined", val[0])
+             end
 
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 78)
+module_eval(<<'.,.,', 'parser.y', 77)
   def _reduce_41(val, _values, result)
      result = [val.compact.inject(:merge)]
     result
@@ -855,21 +902,21 @@ module_eval(<<'.,.,', 'parser.y', 78)
 
 # reduce 44 omitted
 
-module_eval(<<'.,.,', 'parser.y', 86)
+module_eval(<<'.,.,', 'parser.y', 83)
   def _reduce_45(val, _values, result)
      result = { on: val[1][:value] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 89)
+module_eval(<<'.,.,', 'parser.y', 85)
   def _reduce_46(val, _values, result)
      result = { action: :block }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 90)
+module_eval(<<'.,.,', 'parser.y', 86)
   def _reduce_47(val, _values, result)
      result = { action: :pass }
     result
@@ -878,49 +925,49 @@ module_eval(<<'.,.,', 'parser.y', 90)
 
 # reduce 48 omitted
 
-module_eval(<<'.,.,', 'parser.y', 94)
+module_eval(<<'.,.,', 'parser.y', 89)
   def _reduce_49(val, _values, result)
      result = { dir: val[1] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 95)
+module_eval(<<'.,.,', 'parser.y', 90)
   def _reduce_50(val, _values, result)
      result = { dir: val[0] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 98)
+module_eval(<<'.,.,', 'parser.y', 92)
   def _reduce_51(val, _values, result)
      result = val[0] + [val[2]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 99)
+module_eval(<<'.,.,', 'parser.y', 93)
   def _reduce_52(val, _values, result)
      result = val[0] + [val[1]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 100)
+module_eval(<<'.,.,', 'parser.y', 94)
   def _reduce_53(val, _values, result)
      result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 103)
+module_eval(<<'.,.,', 'parser.y', 96)
   def _reduce_54(val, _values, result)
      result = :in
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 104)
+module_eval(<<'.,.,', 'parser.y', 97)
   def _reduce_55(val, _values, result)
      result = :out
     result
@@ -929,14 +976,14 @@ module_eval(<<'.,.,', 'parser.y', 104)
 
 # reduce 56 omitted
 
-module_eval(<<'.,.,', 'parser.y', 108)
+module_eval(<<'.,.,', 'parser.y', 100)
   def _reduce_57(val, _values, result)
      result = { af: :inet }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 109)
+module_eval(<<'.,.,', 'parser.y', 101)
   def _reduce_58(val, _values, result)
      result = { af: :inet6 }
     result
@@ -945,70 +992,70 @@ module_eval(<<'.,.,', 'parser.y', 109)
 
 # reduce 59 omitted
 
-module_eval(<<'.,.,', 'parser.y', 113)
+module_eval(<<'.,.,', 'parser.y', 104)
   def _reduce_60(val, _values, result)
      result = { proto: val[2] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 114)
+module_eval(<<'.,.,', 'parser.y', 105)
   def _reduce_61(val, _values, result)
      result = { proto: val[1] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 117)
+module_eval(<<'.,.,', 'parser.y', 107)
   def _reduce_62(val, _values, result)
      result = val[0] + [val[2]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 118)
+module_eval(<<'.,.,', 'parser.y', 108)
   def _reduce_63(val, _values, result)
      result = val[0] + [val[1]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 119)
+module_eval(<<'.,.,', 'parser.y', 109)
   def _reduce_64(val, _values, result)
      result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 122)
+module_eval(<<'.,.,', 'parser.y', 111)
   def _reduce_65(val, _values, result)
      result = val[0][:value].to_sym
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 125)
+module_eval(<<'.,.,', 'parser.y', 113)
   def _reduce_66(val, _values, result)
-     result = { from: { host: val[1], port: val[2] }, to: { host: val[4], port: val[5] } }
+     result = { from: val[1], to: val[3] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 126)
+module_eval(<<'.,.,', 'parser.y', 114)
   def _reduce_67(val, _values, result)
-     result = { from: { host: val[1], port: val[2] } }
+     result = { from: val[1] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 127)
+module_eval(<<'.,.,', 'parser.y', 115)
   def _reduce_68(val, _values, result)
-     result = { to: { host: val[1], port: val[2] } }
+     result = { to: val[1] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 128)
+module_eval(<<'.,.,', 'parser.y', 116)
   def _reduce_69(val, _values, result)
      result = {}
     result
@@ -1017,193 +1064,192 @@ module_eval(<<'.,.,', 'parser.y', 128)
 
 # reduce 70 omitted
 
-module_eval(<<'.,.,', 'parser.y', 132)
+module_eval(<<'.,.,', 'parser.y', 119)
   def _reduce_71(val, _values, result)
      result = {}
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 135)
+module_eval(<<'.,.,', 'parser.y', 121)
   def _reduce_72(val, _values, result)
-     result = nil
+     result = [{ host: nil, port: val[1] }]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 136)
+module_eval(<<'.,.,', 'parser.y', 122)
   def _reduce_73(val, _values, result)
-     result = val[1]
+     result = [{ host: val[0], port: val[1] }]
     result
   end
 .,.,
 
-# reduce 74 omitted
+module_eval(<<'.,.,', 'parser.y', 123)
+  def _reduce_74(val, _values, result)
+     result = [{ host: nil, port: val[0] }]
+    result
+  end
+.,.,
 
-module_eval(<<'.,.,', 'parser.y', 138)
+module_eval(<<'.,.,', 'parser.y', 124)
   def _reduce_75(val, _values, result)
-     result = @variables.fetch(val[0][:value])
+     result = [{ host: val[1], port: val[3] }]
     result
   end
 .,.,
 
-# reduce 76 omitted
-
-module_eval(<<'.,.,', 'parser.y', 142)
-  def _reduce_77(val, _values, result)
-     result = nil
+module_eval(<<'.,.,', 'parser.y', 125)
+  def _reduce_76(val, _values, result)
+     result = [{ host: @variables.fetch(val[0][:value]), port: val[1] }]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 143)
-  def _reduce_78(val, _values, result)
-     result = val[1]
+module_eval(<<'.,.,', 'parser.y', 126)
+  def _reduce_77(val, _values, result)
+     result = Resolver.instance.resolv_srv(val[2][:value])
     result
   end
 .,.,
 
-# reduce 79 omitted
-
-module_eval(<<'.,.,', 'parser.y', 145)
-  def _reduce_80(val, _values, result)
-     result = @variables.fetch(val[0][:value])
+module_eval(<<'.,.,', 'parser.y', 127)
+  def _reduce_78(val, _values, result)
+     result = Resolver.instance.resolv_apt_mirror(val[2][:value])
     result
   end
 .,.,
 
-# reduce 81 omitted
-
-module_eval(<<'.,.,', 'parser.y', 149)
-  def _reduce_82(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 129)
+  def _reduce_79(val, _values, result)
      result = val[2]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 150)
-  def _reduce_83(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 130)
+  def _reduce_80(val, _values, result)
      result = val[1]
     result
   end
 .,.,
 
-# reduce 84 omitted
+# reduce 81 omitted
 
-module_eval(<<'.,.,', 'parser.y', 154)
-  def _reduce_85(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 133)
+  def _reduce_82(val, _values, result)
      result = val[0] + [val[2]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 155)
-  def _reduce_86(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 134)
+  def _reduce_83(val, _values, result)
      result = val[0] + [val[1]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 156)
-  def _reduce_87(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 135)
+  def _reduce_84(val, _values, result)
      result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 159)
-  def _reduce_88(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 137)
+  def _reduce_85(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 160)
-  def _reduce_89(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 138)
+  def _reduce_86(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 161)
-  def _reduce_90(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 139)
+  def _reduce_87(val, _values, result)
      result = Range.new(val[0][:value], val[2][:value])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 164)
-  def _reduce_91(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 141)
+  def _reduce_88(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 165)
-  def _reduce_92(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 142)
+  def _reduce_89(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 168)
-  def _reduce_93(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 144)
+  def _reduce_90(val, _values, result)
      result = val[0] + [val[2]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 169)
-  def _reduce_94(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 145)
+  def _reduce_91(val, _values, result)
      result = val[0] + [val[1]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 170)
-  def _reduce_95(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 146)
+  def _reduce_92(val, _values, result)
      result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 173)
-  def _reduce_96(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 148)
+  def _reduce_93(val, _values, result)
      result = val[0].merge(val[2])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 174)
-  def _reduce_97(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 149)
+  def _reduce_94(val, _values, result)
      result = val[0].merge(val[1])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 175)
-  def _reduce_98(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 150)
+  def _reduce_95(val, _values, result)
      result = {}
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 178)
-  def _reduce_99(val, _values, result)
-     result = { rdr_to: { host: val[1][:value], port: val[3][:value] } }
+module_eval(<<'.,.,', 'parser.y', 152)
+  def _reduce_96(val, _values, result)
+     result = { rdr_to: [{ host: val[1][:value], port: val[3][:value] }] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 179)
-  def _reduce_100(val, _values, result)
-     result = { rdr_to: { host: val[1][:value] } }
+module_eval(<<'.,.,', 'parser.y', 153)
+  def _reduce_97(val, _values, result)
+     result = { rdr_to: [{ host: val[1][:value], port: nil }] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 180)
-  def _reduce_101(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 154)
+  def _reduce_98(val, _values, result)
      result = { nat_to: val[1][:value] }
     result
   end