puffy 1.0.0 → 1.1.0.pre.rc1

data/lib/puffy/parser.tab.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 #
 # DO NOT MODIFY!!!!
-# This file is automatically generated by Racc 1.7.3
+# This file is automatically generated by Racc 1.8.1
 # from Racc grammar file "parser.y".
 #
 
@@ -24,7 +24,7 @@ unless $".find {|p| p.end_with?('/racc/info.rb')}
 $".push "#{__dir__}/racc/info.rb"
 
 module Racc
-  VERSION   = '1.7.3'
+  VERSION   = '1.8.1'
   Version = VERSION
   Copyright = 'Copyright (c) 1999-2006 Minero Aoki'
 end
@@ -32,10 +32,6 @@ end
 end
 
 
-unless defined?(NotImplementedError)
-  NotImplementedError = NotImplementError # :nodoc:
-end
-
 module Racc
   class ParseError < StandardError; end
 end
@@ -43,7 +39,7 @@ unless defined?(::ParseError)
   ParseError = Racc::ParseError # :nodoc:
 end
 
-# Racc is a LALR(1) parser generator.
+# Racc is an LALR(1) parser generator.
 # It is written in Ruby itself, and generates Ruby programs.
 #
 # == Command-line Reference
@@ -660,15 +656,16 @@ end
 
 require 'deep_merge'
 require 'ipaddr'
+require 'json'
 require 'strscan'
 
 module Puffy
   class Parser < Racc::Parser
 
-module_eval(<<'...end parser.y/module_eval...', 'parser.y', 166)
+module_eval(<<'...end parser.y/module_eval...', 'parser.y', 176)
 
   attr_accessor :yydebug
-  attr_reader :policy, :filename
+  attr_reader :current_policies, :filename
   #attr_accessor :variables, :nodes, :services
 
   def ipaddress?(s)
@@ -749,6 +746,7 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 166)
       when s.scan(/rdr-to\b/) then  emit(:RDR_TO, s.matched)
       when s.scan(/srv\b/) then     emit(:SRV, s.matched)
       when s.scan(/apt-mirror\b/) then emit(:APT_MIRROR, s.matched)
+      when s.scan(/azure-ip-range\b/) then emit(:AZURE_IP_RANGE, s.matched)
 
       when s.scan(/\d+\.\d+\.\d+\.\d+(\/\d+)?/) && ip = ipaddress?(s) then           emit(:ADDRESS, ip, s.matched_size)
       when s.scan(/[[:xdigit:]]*:[:[:xdigit:]]+(\/\d+)?/) && ip = ipaddress?(s) then emit(:ADDRESS, ip, s.matched_size)
@@ -771,7 +769,7 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 166)
 
     begin
       do_parse
-    rescue Racc::ParseError => e
+    rescue Racc::ParseError
       raise ParseError.new("Parse error: unexpected token: #{@current_token[0]}", @current_token[1])
     end
   end
@@ -805,6 +803,10 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 166)
     @saved_policies = {}
     @services = {} 
     @rule_factory = Puffy::RuleFactory.new
+    @default_policies = {
+      in: { action: :block, log: false },
+      out: { action: :block, log: false },
+    }
   end
 
   def nodes
@@ -851,8 +853,8 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 166)
     end.flatten
   end
 
-  def policy_for(hostname)
-    prefered_value_for_hostname(@saved_policies, hostname) || @default_policy || :block
+  def policies_for(hostname)
+    return @default_policies.merge(prefered_value_for_hostname(@saved_policies, hostname))
   end
 
   def constraint_service_to_hosts(service, hosts)
@@ -878,244 +880,259 @@ module_eval(<<'...end parser.y/module_eval...', 'parser.y', 166)
 ##### State transition tables begin ###
 
 racc_action_table = [
-   134,   134,   131,   134,   134,     6,   155,   156,   167,    75,
-   162,    17,   160,     7,     8,    34,   110,    18,     9,   115,
-   116,   111,   110,    10,    35,   115,   116,   111,   110,    77,
-    78,   115,   116,   111,    21,    17,   133,   133,    22,   133,
-   133,    18,   169,   170,   107,   112,   120,   121,   113,   114,
-   107,   112,    17,    15,   113,   114,   107,   112,    18,     6,
-   113,   114,     6,    27,    39,    77,    78,     7,     8,     6,
-     7,     8,     9,    40,    24,     9,     6,     7,     8,    68,
-    25,    26,     9,    50,     7,     8,    77,    78,    67,     9,
-    48,    49,    51,    52,    50,    25,    26,   115,   116,    70,
-    39,    48,    49,    51,    52,    50,    25,    26,    69,    40,
-     9,    63,    48,    49,    51,    52,    50,    25,    26,   136,
-   137,     9,    79,    48,    49,    51,    52,    50,    25,    26,
-   141,   142,   115,   116,    48,    49,    51,    52,    50,    25,
-    26,    30,    31,    32,    97,    48,    49,    51,    52,    50,
-    25,    26,    30,    31,    32,   100,    48,    49,    51,    52,
-    50,    25,    26,    90,    91,    92,   101,    48,    49,    51,
-    52,    50,    25,    26,    90,    91,    92,   102,    48,    49,
-    51,    52,    50,    25,    26,    90,    91,    92,   103,    48,
-    49,    51,    52,    50,    25,    26,    90,    91,    92,   104,
-    48,    49,    51,    52,    50,    25,    26,    77,    78,   115,
-   116,    48,    49,    51,    52,    50,    25,    26,   169,   170,
-   105,   119,    48,    49,    51,    52,    19,    25,    26,   123,
-    21,    17,    55,    56,    22,    21,    21,    18,    28,    22,
-    22,    30,    31,    32,    60,    61,    30,    31,    32,   162,
-   114,   114,   171,   172,   114,   129,   130,   138,   144,   145,
-   148,   150,   114,   153,   154,   158,   162,   175,   176,   162,
-   178,   179 ]
+    36,    36,    31,   144,    93,    36,    38,   134,   135,    12,
+    36,    38,    43,    76,    77,    36,    38,    17,    23,    44,
+    24,    38,     6,    51,    52,    51,    52,     7,   127,     8,
+   178,    29,    38,    10,    40,    35,    35,    37,    41,    40,
+    35,    30,    37,    41,    40,    35,    36,    37,    41,    40,
+    35,    36,    37,    41,   124,   128,    56,   127,   129,   130,
+    40,    38,    48,    37,    41,   180,   181,    36,   127,    49,
+   167,   168,    38,    57,   152,   153,    23,    38,    24,    38,
+   160,    35,   110,   124,   128,   160,    35,   129,   130,    40,
+    38,    10,    37,    41,   124,   128,   108,   109,   129,   130,
+    40,   160,    35,    37,    41,    40,    86,    40,    37,    41,
+    37,    41,    10,    85,    19,    64,    75,   110,    40,   110,
+    20,    37,    41,    62,    63,    65,    66,    64,    79,    26,
+    27,   108,   109,   108,   109,    62,    63,    65,    66,    64,
+    21,    26,    27,   110,    23,    88,    24,    62,    63,    65,
+    66,    64,    87,    26,    27,    26,    27,   108,   109,    62,
+    63,    65,    66,    64,    19,    26,    27,    51,    52,    48,
+    20,    62,    63,    65,    66,    64,    49,    26,    27,   173,
+    80,   171,    19,    62,    63,    65,    66,    64,    20,    26,
+    27,    26,    27,    81,    19,    62,    63,    65,    66,    64,
+    20,    26,    27,    51,    52,    51,    52,    62,    63,    65,
+    66,    64,   173,    26,    27,   182,   183,   147,   148,    62,
+    63,    65,    66,    64,    95,    26,    27,    51,    52,   180,
+   181,    62,    63,    65,    66,    64,   100,    26,    27,   102,
+    75,   117,   118,    62,    63,    65,    66,     6,     6,    26,
+    27,   119,     7,     7,     8,     8,     6,     6,    10,    10,
+   120,     7,     7,     8,     8,   121,   122,    10,    10,    69,
+    70,   133,    23,   137,    24,   130,   130,   142,   143,   149,
+   155,   156,   162,   130,   165,   166,   173,   186,   187,   173,
+   189,   190 ]
 
 racc_action_check = [
-   114,   131,   114,   146,   156,     0,   146,   146,   164,    53,
-   150,     7,   150,     0,     0,    16,    90,     7,     0,    90,
-    90,    90,    91,     1,    16,    91,    91,    91,   123,    53,
-    53,   123,   123,   123,    19,    50,   114,   131,    19,   146,
-   156,    50,   164,   164,    90,    90,    98,    98,    90,    90,
-    91,    91,    51,     6,    91,    91,   123,   123,    51,     2,
-   123,   123,     3,    10,    20,    98,    98,     2,     2,     4,
-     3,     3,     2,    20,     9,     3,     5,     4,     4,    48,
-     9,     9,     4,    34,     5,     5,    75,    75,    48,     5,
-    34,    34,    34,    34,    35,    34,    34,   110,   110,    49,
-    55,    35,    35,    35,    35,    39,    35,    35,    49,    55,
-    39,    44,    39,    39,    39,    39,    40,    39,    39,   118,
-   118,    40,    54,    40,    40,    40,    40,    45,    40,    40,
-   126,   126,   126,   126,    45,    45,    45,    45,    46,    45,
-    45,    28,    28,    28,    74,    46,    46,    46,    46,    47,
-    46,    46,    61,    61,    61,    82,    47,    47,    47,    47,
-    58,    47,    47,    71,    71,    71,    83,    58,    58,    58,
-    58,    59,    58,    58,    72,    72,    72,    85,    59,    59,
-    59,    59,    67,    59,    59,    73,    73,    73,    86,    67,
-    67,    67,    67,    68,    67,    67,   149,   149,   149,    87,
-    68,    68,    68,    68,    69,    68,    68,   121,   121,   142,
-   142,    69,    69,    69,    69,    70,    69,    69,   167,   167,
-    88,    96,    70,    70,    70,    70,     8,    70,    70,   106,
-     8,    52,    36,    36,     8,    36,    56,    52,    15,    36,
-    56,    15,    15,    15,    42,    42,    42,    42,    42,   165,
-   107,   108,   165,   165,   111,   112,   113,   119,   129,   130,
-   133,   135,   141,   144,   145,   148,   160,   169,   170,   172,
-   175,   178 ]
+    17,   130,    17,   130,    67,    31,    17,   115,   115,     1,
+    54,    31,    18,    54,    54,    77,    54,     6,    21,    18,
+    21,    77,     0,    67,    67,   115,   115,     0,   108,     0,
+   175,    11,   108,     0,    17,    17,   130,    17,    17,    31,
+    31,    12,    31,    31,    54,    54,   144,    54,    54,    77,
+    77,   168,    77,    77,   108,   108,    35,   109,   108,   108,
+   108,   109,    22,   108,   108,   175,   175,   157,   137,    22,
+   157,   157,   137,    41,   140,   140,    70,   140,    70,   127,
+   144,   144,    89,   109,   109,   168,   168,   109,   109,   109,
+   153,    48,   109,   109,   137,   137,    89,    89,   137,   137,
+   137,   157,   157,   137,   137,   140,    62,   127,   140,   140,
+   127,   127,    49,    62,     7,    43,    50,    90,   153,    91,
+     7,   153,   153,    43,    43,    43,    43,    44,    56,    43,
+    43,    90,    90,    91,    91,    44,    44,    44,    44,    59,
+     8,    44,    44,   161,     8,    63,     8,    59,    59,    59,
+    59,    60,    63,    59,    59,    10,    10,   161,   161,    60,
+    60,    60,    60,    61,    64,    60,    60,    25,    25,    69,
+    64,    61,    61,    61,    61,    72,    69,    61,    61,   162,
+    57,   162,    65,    72,    72,    72,    72,    73,    65,    72,
+    72,    29,    29,    58,    66,    73,    73,    73,    73,    85,
+    66,    73,    73,    53,    53,    93,    93,    85,    85,    85,
+    85,    86,   176,    85,    85,   176,   176,   132,   132,    86,
+    86,    86,    86,    87,    68,    86,    86,   135,   135,   178,
+   178,    87,    87,    87,    87,    88,    74,    87,    87,    80,
+    92,    98,    99,    88,    88,    88,    88,     2,     3,    88,
+    88,   103,     2,     3,     2,     3,     4,     5,     2,     3,
+   104,     4,     5,     4,     5,   105,   106,     4,     5,    45,
+    45,   114,    45,   123,    45,   124,   126,   128,   129,   133,
+   142,   143,   146,   152,   155,   156,   171,   180,   181,   183,
+   186,   189 ]
 
 racc_action_pointer = [
-     3,    23,    57,    60,    67,    74,    50,     9,   222,    58,
-    63,   nil,   nil,   nil,   nil,   234,    11,   nil,   nil,    26,
-    60,   nil,   nil,   nil,   nil,   nil,   nil,   nil,   134,   nil,
-   nil,   nil,   nil,   nil,    73,    84,   227,   nil,   nil,    95,
-   106,   nil,   239,   nil,   106,   117,   128,   139,    75,    95,
-    33,    50,   229,     5,   108,    96,   228,   nil,   150,   161,
-   nil,   145,   nil,   nil,   nil,   nil,   nil,   172,   183,   194,
-   205,   134,   145,   156,   128,    62,   nil,   nil,   nil,   nil,
-   nil,   nil,   150,   152,   nil,   163,   183,   185,   215,   nil,
-    12,    18,   nil,   nil,   nil,   nil,   200,   nil,    41,   nil,
-   nil,   nil,   nil,   nil,   nil,   nil,   199,   213,   214,   nil,
-    90,   217,   221,   222,    -2,   nil,   nil,   nil,    93,   249,
-   nil,   183,   nil,    24,   nil,   nil,   125,   nil,   nil,   250,
-   251,    -1,   nil,   221,   nil,   233,   nil,   nil,   nil,   nil,
-   nil,   225,   202,   nil,   228,   229,     1,   nil,   227,   167,
-     8,   nil,   nil,   nil,   nil,   nil,     2,   nil,   nil,   nil,
-   264,   nil,   nil,   nil,     2,   247,   nil,   178,   nil,   260,
-   261,   nil,   267,   nil,   nil,   233,   nil,   nil,   233,   nil ]
+    20,     9,   245,   246,   254,   255,    14,   112,   136,   nil,
+   134,    18,    41,   nil,   nil,   nil,   nil,    -2,     8,   nil,
+   nil,    10,    58,   nil,   nil,   144,   nil,   nil,   nil,   170,
+   nil,     3,   nil,   nil,   nil,    18,   nil,   nil,   nil,   nil,
+   nil,    41,   nil,   108,   120,   264,   nil,   nil,    78,    99,
+    97,   nil,   nil,   180,     8,   nil,    91,   172,   188,   132,
+   144,   156,   102,   141,   162,   180,   192,     0,   212,   165,
+    68,   nil,   168,   180,   222,   nil,   nil,    13,   nil,   nil,
+   206,   nil,   nil,   nil,   nil,   192,   204,   216,   228,    68,
+   103,   105,   221,   182,   nil,   nil,   nil,   nil,   236,   230,
+   nil,   nil,   nil,   239,   255,   253,   261,   nil,    24,    53,
+   nil,   nil,   nil,   nil,   251,     2,   nil,   nil,   nil,   nil,
+   nil,   nil,   nil,   244,   240,   nil,   241,    71,   245,   246,
+    -1,   nil,   192,   271,   nil,   204,   nil,    64,   nil,   nil,
+    69,   nil,   272,   273,    44,   nil,   255,   nil,   nil,   nil,
+   nil,   nil,   248,    82,   nil,   251,   252,    65,   nil,   nil,
+   nil,   129,   177,   nil,   nil,   nil,   nil,   nil,    49,   nil,
+   nil,   284,   nil,   nil,   nil,    24,   210,   nil,   188,   nil,
+   248,   249,   nil,   287,   nil,   nil,   255,   nil,   nil,   254,
+   nil ]
 
 racc_action_default = [
-    -5,  -100,    -5,    -5,    -5,    -5,  -100,  -100,  -100,  -100,
-  -100,    -1,    -2,    -3,    -4,  -100,  -100,   -15,   -16,  -100,
-  -100,   -22,   -23,   -33,   -34,   -47,   -48,   180,  -100,    -7,
-   -11,   -12,   -13,   -14,   -32,   -32,  -100,   -21,   -18,   -32,
-   -32,   -26,  -100,   -10,  -100,   -32,   -32,   -32,  -100,  -100,
-  -100,  -100,  -100,   -49,  -100,  -100,  -100,   -20,   -32,   -32,
-    -6,  -100,    -9,   -27,   -29,   -30,   -31,   -32,   -32,   -32,
-   -32,   -72,   -72,   -72,   -44,  -100,   -51,   -55,   -56,   -28,
-   -17,   -19,  -100,  -100,    -8,  -100,  -100,  -100,  -100,   -39,
-   -82,   -82,   -70,   -71,   -40,   -41,   -45,   -43,  -100,   -54,
-   -24,   -25,   -35,   -36,   -37,   -38,   -68,   -82,   -82,   -75,
-  -100,   -82,  -100,  -100,  -100,   -89,   -90,   -69,   -57,  -100,
-   -50,  -100,   -53,   -82,   -73,   -74,  -100,   -93,   -77,  -100,
-  -100,  -100,   -81,   -86,   -87,   -60,   -58,   -59,   -46,   -52,
-   -67,   -82,  -100,   -92,  -100,  -100,  -100,   -85,  -100,  -100,
-  -100,   -76,   -91,   -78,   -79,   -80,  -100,   -84,   -88,   -96,
-  -100,   -62,   -66,   -83,   -42,  -100,   -65,  -100,   -95,  -100,
-  -100,   -61,  -100,   -64,   -94,   -98,   -99,   -63,  -100,   -97 ]
+    -5,  -105,    -5,    -5,    -5,    -5,  -105,  -105,  -105,   -31,
+  -105,   -34,  -105,    -1,    -2,    -3,    -4,  -105,  -105,   -14,
+   -15,  -105,  -105,   -21,   -22,   -32,   -48,   -49,   -33,  -105,
+   191,  -105,    -7,   -11,   -12,   -88,   -89,   -91,   -92,   -96,
+   -97,  -105,   -13,   -30,   -30,  -105,   -20,   -17,   -34,   -34,
+   -45,   -56,   -57,  -105,  -105,   -10,  -105,  -105,  -105,   -30,
+   -30,   -30,  -105,  -105,  -105,  -105,  -105,   -50,  -105,  -105,
+  -105,   -19,   -30,   -30,  -105,   -44,    -6,  -105,    -9,   -90,
+  -105,   -25,   -27,   -28,   -29,   -30,   -30,   -30,   -30,   -73,
+   -73,   -73,   -45,  -105,   -52,   -26,   -16,   -18,  -105,  -105,
+   -35,    -8,   -98,  -105,  -105,  -105,  -105,   -40,   -82,   -82,
+   -71,   -72,   -41,   -42,   -46,  -105,   -55,   -23,   -24,   -36,
+   -37,   -38,   -39,   -69,   -82,   -75,   -82,  -105,  -105,  -105,
+  -105,   -70,   -58,  -105,   -51,  -105,   -54,   -82,   -74,   -76,
+  -105,   -95,  -105,  -105,  -105,   -81,   -61,   -59,   -60,   -47,
+   -53,   -68,   -82,  -105,   -94,  -105,  -105,  -105,   -85,   -86,
+   -87,  -105,  -105,   -77,   -93,   -78,   -79,   -80,  -105,   -84,
+  -101,  -105,   -63,   -67,   -83,   -43,  -105,   -66,  -105,  -100,
+  -105,  -105,   -62,  -105,   -65,   -99,  -103,  -104,   -64,  -105,
+  -102 ]
 
 racc_goto_table = [
-    76,    20,   132,    16,    29,    38,   161,   124,   125,   106,
-   117,   128,    37,    58,    59,   168,   166,    43,   174,   147,
-   127,   173,    99,    89,    94,    95,    42,    33,   177,    57,
-    36,    62,    23,    74,   157,    96,   143,   118,   135,   149,
-    80,   151,   140,   159,   163,   122,    71,    72,    73,    81,
-    84,    54,   152,   164,    98,     1,    54,    11,    12,    13,
-    14,    64,    65,    66,   165,   126,   146,   nil,   139,   nil,
-   nil,   nil,   nil,   nil,    82,    83,   nil,   nil,   nil,   nil,
-   nil,   nil,   nil,    85,    86,    87,    88 ]
+    94,    22,    32,    47,   126,   126,    25,    18,   145,    74,
+   179,    58,    68,   185,    46,   138,    55,   139,   123,   131,
+    54,   158,   159,   141,    42,    53,   116,    82,    83,    84,
+   107,   112,   113,   126,   169,   159,   154,    45,    71,    78,
+    98,    99,    28,   163,    92,   174,   159,   151,   136,   164,
+    96,   114,   132,   103,   104,   105,   106,   146,   172,    72,
+    73,   161,   101,    97,    89,    90,    91,   177,   150,   170,
+   175,     1,   184,    13,    14,    15,    16,   115,   176,   188,
+   140,   157 ]
 
 racc_goto_check = [
-    27,    12,    35,     8,     7,    11,    29,    31,    31,    30,
-    30,    31,    12,     4,     4,    36,    29,     7,    36,    35,
-    32,    29,    27,    18,    18,    18,     6,     9,    29,    12,
-    10,     7,    17,    19,    35,    20,    32,    21,    22,    23,
-    11,    31,    30,    24,    35,    27,     8,     8,     8,    12,
-     7,    13,    32,    25,    26,     1,    13,     1,     1,     1,
-     1,    13,    13,    13,    28,    33,    34,   nil,    27,   nil,
-   nil,   nil,   nil,   nil,    13,    13,   nil,   nil,   nil,   nil,
-   nil,   nil,   nil,    13,    13,    13,    13 ]
+    22,    14,     7,    13,     8,     8,    20,    10,     9,    23,
+    40,    15,    15,    40,    14,    35,     7,    35,    34,    34,
+     6,    38,     9,     8,    11,    20,    22,    15,    15,    15,
+    24,    24,    24,     8,    38,     9,     8,    12,    14,     7,
+    15,    15,    19,    35,    25,    38,     9,    34,    22,     8,
+    13,    23,    26,    15,    15,    15,    15,    27,    33,     4,
+     4,    28,     7,    14,    10,    10,    10,    33,    22,    29,
+    30,     1,    33,     1,     1,     1,     1,    31,    32,    33,
+    36,    37 ]
 
 racc_goto_pointer = [
-   nil,    55,   nil,   nil,   -26,   nil,    -2,   -11,    -4,    11,
-    11,   -15,    -7,    16,   nil,   nil,   nil,    23,   -48,   -20,
-   -39,   -59,   -80,   -96,  -106,  -106,   -21,   -53,   -96,  -144,
-   -81,  -100,   -90,   -45,   -65,  -112,  -149 ]
+   nil,    71,   nil,   nil,    11,   nil,   -11,   -15,  -104,  -122,
+     0,     6,    16,   -19,    -7,   -32,   nil,   nil,   nil,    31,
+    -4,   nil,   -67,   -41,   -59,   -23,   -62,   -75,   -85,   -92,
+  -100,   -16,   -93,  -104,   -90,  -109,   -47,   -63,  -123,   nil,
+  -165 ]
 
 racc_goto_default = [
-   nil,   nil,     2,     3,     4,     5,   nil,   nil,   nil,    41,
-   nil,   nil,   nil,    44,    45,    46,    47,    53,   nil,   nil,
-   nil,   nil,   nil,   nil,    93,   nil,   nil,   nil,   nil,   nil,
-   nil,   109,   108,   nil,   nil,   nil,   nil ]
+   nil,   nil,     2,     3,     4,     5,   nil,   nil,    33,    34,
+   nil,   nil,   nil,   nil,   nil,   nil,    59,    60,    61,     9,
+    67,    11,    50,   nil,   nil,   nil,   nil,   nil,   nil,   111,
+   nil,   nil,   nil,   nil,   nil,   125,   nil,   nil,   nil,    39,
+   nil ]
 
 racc_reduce_table = [
   0, 0, :racc_error,
-  2, 43, :_reduce_none,
-  2, 43, :_reduce_none,
-  2, 43, :_reduce_3,
-  2, 43, :_reduce_none,
-  0, 43, :_reduce_none,
-  5, 44, :_reduce_6,
-  3, 44, :_reduce_7,
-  3, 48, :_reduce_8,
-  2, 48, :_reduce_9,
-  1, 48, :_reduce_10,
-  1, 49, :_reduce_11,
-  1, 49, :_reduce_12,
-  1, 49, :_reduce_13,
-  3, 47, :_reduce_14,
-  1, 50, :_reduce_15,
-  1, 50, :_reduce_16,
-  5, 45, :_reduce_17,
-  3, 45, :_reduce_18,
-  3, 52, :_reduce_19,
-  2, 52, :_reduce_20,
-  1, 52, :_reduce_21,
-  1, 54, :_reduce_22,
-  1, 54, :_reduce_23,
-  4, 53, :_reduce_24,
-  4, 53, :_reduce_25,
-  1, 53, :_reduce_26,
-  3, 51, :_reduce_27,
-  3, 51, :_reduce_28,
-  2, 55, :_reduce_29,
-  2, 55, :_reduce_30,
-  2, 55, :_reduce_31,
-  0, 55, :_reduce_32,
-  2, 46, :_reduce_33,
-  2, 46, :_reduce_34,
-  4, 57, :_reduce_35,
-  4, 57, :_reduce_36,
-  4, 58, :_reduce_37,
-  4, 58, :_reduce_38,
-  3, 56, :_reduce_39,
-  3, 56, :_reduce_40,
-  3, 56, :_reduce_41,
-  8, 56, :_reduce_42,
-  1, 62, :_reduce_none,
-  0, 62, :_reduce_none,
-  0, 63, :_reduce_none,
-  2, 63, :_reduce_46,
-  1, 59, :_reduce_47,
-  1, 59, :_reduce_48,
-  0, 61, :_reduce_none,
-  3, 61, :_reduce_50,
-  1, 61, :_reduce_51,
-  3, 68, :_reduce_52,
-  2, 68, :_reduce_53,
-  1, 68, :_reduce_54,
-  1, 69, :_reduce_55,
-  1, 69, :_reduce_56,
-  0, 64, :_reduce_none,
-  1, 64, :_reduce_58,
-  1, 64, :_reduce_59,
-  0, 65, :_reduce_none,
-  4, 65, :_reduce_61,
-  2, 65, :_reduce_62,
-  3, 70, :_reduce_63,
-  2, 70, :_reduce_64,
-  1, 70, :_reduce_65,
-  1, 71, :_reduce_66,
-  4, 66, :_reduce_67,
-  2, 66, :_reduce_68,
-  2, 66, :_reduce_69,
-  1, 66, :_reduce_70,
-  1, 60, :_reduce_none,
-  0, 60, :_reduce_72,
-  2, 72, :_reduce_73,
-  2, 72, :_reduce_74,
-  1, 72, :_reduce_75,
-  4, 72, :_reduce_76,
-  2, 72, :_reduce_77,
-  4, 72, :_reduce_78,
-  4, 72, :_reduce_79,
-  4, 73, :_reduce_80,
-  2, 73, :_reduce_81,
-  0, 73, :_reduce_none,
-  3, 76, :_reduce_83,
-  2, 76, :_reduce_84,
-  1, 76, :_reduce_85,
-  1, 77, :_reduce_86,
-  1, 77, :_reduce_87,
-  3, 77, :_reduce_88,
-  1, 74, :_reduce_89,
-  1, 74, :_reduce_90,
-  3, 75, :_reduce_91,
-  2, 75, :_reduce_92,
-  1, 75, :_reduce_93,
-  3, 67, :_reduce_94,
-  2, 67, :_reduce_95,
-  0, 67, :_reduce_96,
-  4, 78, :_reduce_97,
-  2, 78, :_reduce_98,
-  2, 78, :_reduce_99 ]
-
-racc_reduce_n = 100
-
-racc_shift_n = 180
+  2, 44, :_reduce_none,
+  2, 44, :_reduce_none,
+  2, 44, :_reduce_3,
+  2, 44, :_reduce_none,
+  0, 44, :_reduce_none,
+  5, 45, :_reduce_6,
+  3, 45, :_reduce_7,
+  3, 49, :_reduce_8,
+  2, 49, :_reduce_9,
+  1, 49, :_reduce_10,
+  1, 50, :_reduce_11,
+  1, 50, :_reduce_12,
+  3, 48, :_reduce_13,
+  1, 53, :_reduce_14,
+  1, 53, :_reduce_15,
+  5, 46, :_reduce_16,
+  3, 46, :_reduce_17,
+  3, 55, :_reduce_18,
+  2, 55, :_reduce_19,
+  1, 55, :_reduce_20,
+  1, 57, :_reduce_21,
+  1, 57, :_reduce_22,
+  4, 56, :_reduce_23,
+  4, 56, :_reduce_24,
+  3, 54, :_reduce_25,
+  3, 54, :_reduce_26,
+  2, 58, :_reduce_27,
+  2, 58, :_reduce_28,
+  2, 58, :_reduce_29,
+  0, 58, :_reduce_30,
+  1, 47, :_reduce_31,
+  2, 47, :_reduce_32,
+  2, 62, :_reduce_33,
+  0, 62, :_reduce_34,
+  5, 64, :_reduce_35,
+  4, 60, :_reduce_36,
+  4, 60, :_reduce_37,
+  4, 61, :_reduce_38,
+  4, 61, :_reduce_39,
+  3, 59, :_reduce_40,
+  3, 59, :_reduce_41,
+  3, 59, :_reduce_42,
+  8, 59, :_reduce_43,
+  1, 66, :_reduce_44,
+  0, 66, :_reduce_45,
+  0, 69, :_reduce_none,
+  2, 69, :_reduce_47,
+  1, 63, :_reduce_48,
+  1, 63, :_reduce_49,
+  0, 68, :_reduce_none,
+  3, 68, :_reduce_51,
+  1, 68, :_reduce_52,
+  3, 74, :_reduce_53,
+  2, 74, :_reduce_54,
+  1, 74, :_reduce_55,
+  1, 65, :_reduce_56,
+  1, 65, :_reduce_57,
+  0, 70, :_reduce_none,
+  1, 70, :_reduce_59,
+  1, 70, :_reduce_60,
+  0, 71, :_reduce_none,
+  4, 71, :_reduce_62,
+  2, 71, :_reduce_63,
+  3, 75, :_reduce_64,
+  2, 75, :_reduce_65,
+  1, 75, :_reduce_66,
+  1, 76, :_reduce_67,
+  4, 72, :_reduce_68,
+  2, 72, :_reduce_69,
+  2, 72, :_reduce_70,
+  1, 72, :_reduce_71,
+  1, 67, :_reduce_none,
+  0, 67, :_reduce_73,
+  2, 77, :_reduce_74,
+  1, 77, :_reduce_75,
+  2, 77, :_reduce_76,
+  4, 77, :_reduce_77,
+  4, 77, :_reduce_78,
+  4, 77, :_reduce_79,
+  4, 78, :_reduce_80,
+  2, 78, :_reduce_81,
+  0, 78, :_reduce_none,
+  3, 80, :_reduce_83,
+  2, 80, :_reduce_84,
+  1, 80, :_reduce_85,
+  1, 81, :_reduce_86,
+  1, 81, :_reduce_87,
+  1, 52, :_reduce_88,
+  1, 52, :_reduce_89,
+  3, 52, :_reduce_90,
+  1, 82, :_reduce_91,
+  1, 82, :_reduce_92,
+  3, 79, :_reduce_93,
+  2, 79, :_reduce_94,
+  1, 79, :_reduce_95,
+  1, 51, :_reduce_96,
+  1, 51, :_reduce_97,
+  4, 51, :_reduce_98,
+  3, 73, :_reduce_99,
+  2, 73, :_reduce_100,
+  0, 73, :_reduce_101,
+  4, 83, :_reduce_102,
+  2, 83, :_reduce_103,
+  2, 83, :_reduce_104 ]
+
+racc_reduce_n = 105
+
+racc_shift_n = 191
 
 racc_token_table = {
   false => 0,
@@ -1125,43 +1142,44 @@ racc_token_table = {
   "{" => 4,
   "}" => 5,
   "," => 6,
-  :ADDRESS => 7,
+  :SERVICE => 7,
   :STRING => 8,
-  :VARIABLE => 9,
-  :SERVICE => 10,
-  :NODE => 11,
-  :REGEX => 12,
-  :DO => 13,
-  :END => 14,
-  :POLICY => 15,
-  :LOG => 16,
-  :IPV4 => 17,
-  :IPV6 => 18,
-  :CLIENT => 19,
-  :SERVER => 20,
-  :ON => 21,
-  :BLOCK => 22,
-  :PASS => 23,
-  :IN => 24,
-  :OUT => 25,
-  :INET => 26,
-  :INET6 => 27,
-  :PROTO => 28,
-  :FROM => 29,
-  :TO => 30,
-  :ALL => 31,
-  :ANY => 32,
-  :SRV => 33,
-  "(" => 34,
-  ")" => 35,
-  :APT_MIRROR => 36,
-  :PORT => 37,
-  :INTEGER => 38,
-  ":" => 39,
-  :RDR_TO => 40,
-  :NAT_TO => 41 }
-
-racc_nt_base = 42
+  :NODE => 9,
+  :REGEX => 10,
+  :DO => 11,
+  :END => 12,
+  :POLICY => 13,
+  :ALL => 14,
+  :IPV4 => 15,
+  :IPV6 => 16,
+  :CLIENT => 17,
+  :SERVER => 18,
+  :LOG => 19,
+  :ON => 20,
+  :BLOCK => 21,
+  :PASS => 22,
+  :IN => 23,
+  :OUT => 24,
+  :INET => 25,
+  :INET6 => 26,
+  :PROTO => 27,
+  :FROM => 28,
+  :TO => 29,
+  :ANY => 30,
+  :SRV => 31,
+  "(" => 32,
+  ")" => 33,
+  :APT_MIRROR => 34,
+  :PORT => 35,
+  :VARIABLE => 36,
+  :INTEGER => 37,
+  ":" => 38,
+  :ADDRESS => 39,
+  :AZURE_IP_RANGE => 40,
+  :RDR_TO => 41,
+  :NAT_TO => 42 }
+
+racc_nt_base = 43
 
 racc_use_result_var = true
 
@@ -1190,20 +1208,19 @@ Racc_token_to_s_table = [
   "\"{\"",
   "\"}\"",
   "\",\"",
-  "ADDRESS",
-  "STRING",
-  "VARIABLE",
   "SERVICE",
+  "STRING",
   "NODE",
   "REGEX",
   "DO",
   "END",
   "POLICY",
-  "LOG",
+  "ALL",
   "IPV4",
   "IPV6",
   "CLIENT",
   "SERVER",
+  "LOG",
   "ON",
   "BLOCK",
   "PASS",
@@ -1214,53 +1231,59 @@ Racc_token_to_s_table = [
   "PROTO",
   "FROM",
   "TO",
-  "ALL",
   "ANY",
   "SRV",
   "\"(\"",
   "\")\"",
   "APT_MIRROR",
   "PORT",
+  "VARIABLE",
   "INTEGER",
   "\":\"",
+  "ADDRESS",
+  "AZURE_IP_RANGE",
   "RDR_TO",
   "NAT_TO",
   "$start",
   "target",
   "assignation",
   "node",
-  "policy",
+  "policies",
   "service",
   "variable_value_list",
   "variable_value",
+  "host_list_item",
+  "port",
   "service_name",
   "block",
   "node_name_list",
-  "block_with_policy",
+  "block_with_policies",
   "node_name",
   "rules",
   "pf_rule",
   "ipv4_block",
   "ipv6_block",
+  "policy_list",
   "action",
+  "policy",
+  "direction",
+  "log",
   "optional_hosts",
   "rule_direction",
-  "log",
   "on_interface",
   "rule_af",
   "protospec",
   "hosts",
   "filteropts",
   "direction_list",
-  "direction",
   "protocol_list",
   "protocol",
   "hosts_host",
   "hosts_port",
-  "host",
   "host_list",
   "port_list",
-  "port",
+  "port_list_item",
+  "host",
   "filteropt" ]
 Ractor.make_shareable(Racc_token_to_s_table) if defined?(Ractor)
 
@@ -1276,7 +1299,7 @@ Racc_debug_parser = false
 
 module_eval(<<'.,.,', 'parser.y', 4)
   def _reduce_3(val, _values, result)
-     @default_policy = val[0]
+     @default_policies = val[0]
     result
   end
 .,.,
@@ -1322,28 +1345,28 @@ module_eval(<<'.,.,', 'parser.y', 13)
 
 module_eval(<<'.,.,', 'parser.y', 15)
   def _reduce_11(val, _values, result)
-     result = val[0][:value]
+     result = val[0]
     result
   end
 .,.,
 
 module_eval(<<'.,.,', 'parser.y', 16)
   def _reduce_12(val, _values, result)
-     result = val[0][:value]
+     result = val[0]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 17)
+module_eval(<<'.,.,', 'parser.y', 18)
   def _reduce_13(val, _values, result)
-     result = @variables.fetch(val[0][:value])
+     @services[val[1]] = val[2]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 19)
+module_eval(<<'.,.,', 'parser.y', 20)
   def _reduce_14(val, _values, result)
-     @services[val[1]] = val[2]
+     result = val[0][:value]
     result
   end
 .,.,
@@ -1355,44 +1378,44 @@ module_eval(<<'.,.,', 'parser.y', 21)
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 22)
+module_eval(<<'.,.,', 'parser.y', 23)
   def _reduce_16(val, _values, result)
-     result = val[0][:value]
+     val[2].each { |name| @nodes[name] = val[4]; @saved_policies[name] = @current_policies }
     result
   end
 .,.,
 
 module_eval(<<'.,.,', 'parser.y', 24)
   def _reduce_17(val, _values, result)
-     val[2].each { |name| @nodes[name] = val[4]; @saved_policies[name] = @policy }
+     @nodes[val[1]] = val[2]; @saved_policies[val[1]] = @current_policies
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 25)
+module_eval(<<'.,.,', 'parser.y', 26)
   def _reduce_18(val, _values, result)
-     @nodes[val[1]] = val[2]; @saved_policies[val[1]] = @policy
+     result = val[0] + [val[2]]
     result
   end
 .,.,
 
 module_eval(<<'.,.,', 'parser.y', 27)
   def _reduce_19(val, _values, result)
-     result = val[0] + [val[2]]
+     result = val[0] + [val[1]]
     result
   end
 .,.,
 
 module_eval(<<'.,.,', 'parser.y', 28)
   def _reduce_20(val, _values, result)
-     result = val[0] + [val[1]]
+     result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 29)
+module_eval(<<'.,.,', 'parser.y', 30)
   def _reduce_21(val, _values, result)
-     result = [val[0]]
+     result = val[0][:value]
     result
   end
 .,.,
@@ -1404,44 +1427,44 @@ module_eval(<<'.,.,', 'parser.y', 31)
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 32)
+module_eval(<<'.,.,', 'parser.y', 33)
   def _reduce_23(val, _values, result)
-     result = val[0][:value]
+     @current_policies = val[1]; result = val[2]
     result
   end
 .,.,
 
 module_eval(<<'.,.,', 'parser.y', 34)
   def _reduce_24(val, _values, result)
-     @policy = val[1]; result = val[2]
+     @current_policies = val[1]; result = val[2]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 35)
+module_eval(<<'.,.,', 'parser.y', 36)
   def _reduce_25(val, _values, result)
-     @policy = val[1]; result = val[2]
+     result = val[1].freeze
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 36)
+module_eval(<<'.,.,', 'parser.y', 37)
   def _reduce_26(val, _values, result)
-     @policy = nil; result = val[0]
+     result = val[1].freeze
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 38)
+module_eval(<<'.,.,', 'parser.y', 39)
   def _reduce_27(val, _values, result)
-     result = val[1].freeze
+     result = val[0] + val[1]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 39)
+module_eval(<<'.,.,', 'parser.y', 40)
   def _reduce_28(val, _values, result)
-     result = val[1].freeze
+     result = val[0] + val[1]
     result
   end
 .,.,
@@ -1455,61 +1478,61 @@ module_eval(<<'.,.,', 'parser.y', 41)
 
 module_eval(<<'.,.,', 'parser.y', 42)
   def _reduce_30(val, _values, result)
-     result = val[0] + val[1]
+     result = []
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 43)
+module_eval(<<'.,.,', 'parser.y', 44)
   def _reduce_31(val, _values, result)
-     result = val[0] + val[1]
+     result = val[0]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 44)
+module_eval(<<'.,.,', 'parser.y', 45)
   def _reduce_32(val, _values, result)
-     result = []
+     warn("#{val[0][:filename]}:#{val[0][:lineno]}:#{val[0][:position]}: deprecated policy syntax:\n\t#{val[0][:line]}\n\t#{' ' * val[0][:position]}^#{'~' * (val[0][:line].length - 1 - val[0][:position])}\n\tUse explicit 'in' and 'out' policies, with optional logging:\n\tpolicy #{val[1][:action]} in all\n\tpolicy #{val[1][:action]} out all") ; result = { in: { action: val[1][:action] }, out: { action: val[1][:action] } }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 46)
+module_eval(<<'.,.,', 'parser.y', 47)
   def _reduce_33(val, _values, result)
-     result = val[1][:action]
+     result = val[1].merge(val[0][:dir] => val[0])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 47)
+module_eval(<<'.,.,', 'parser.y', 48)
   def _reduce_34(val, _values, result)
-     result = 'log'
+     result = {}
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 49)
+module_eval(<<'.,.,', 'parser.y', 50)
   def _reduce_35(val, _values, result)
-     result = val[2].reject { |x| x[:af] == :inet6 }.map { |x| x[:af] = :inet ; x }
+     result = { action: val[1][:action], dir: val[2], log: val[3].any? }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 50)
+module_eval(<<'.,.,', 'parser.y', 52)
   def _reduce_36(val, _values, result)
      result = val[2].reject { |x| x[:af] == :inet6 }.map { |x| x[:af] = :inet ; x }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 52)
+module_eval(<<'.,.,', 'parser.y', 53)
   def _reduce_37(val, _values, result)
-     result = val[2].reject { |x| x[:af] == :inet }.map { |x| x[:af] = :inet6 ; x }
+     result = val[2].reject { |x| x[:af] == :inet6 }.map { |x| x[:af] = :inet ; x }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 53)
+module_eval(<<'.,.,', 'parser.y', 55)
   def _reduce_38(val, _values, result)
      result = val[2].reject { |x| x[:af] == :inet }.map { |x| x[:af] = :inet6 ; x }
     result
@@ -1518,6 +1541,13 @@ module_eval(<<'.,.,', 'parser.y', 53)
 
 module_eval(<<'.,.,', 'parser.y', 56)
   def _reduce_39(val, _values, result)
+     result = val[2].reject { |x| x[:af] == :inet }.map { |x| x[:af] = :inet6 ; x }
+    result
+  end
+.,.,
+
+module_eval(<<'.,.,', 'parser.y', 59)
+  def _reduce_40(val, _values, result)
                  begin
                result = constraint_service_to_hosts(val[1], val[2])
              rescue KeyError
@@ -1528,8 +1558,8 @@ module_eval(<<'.,.,', 'parser.y', 56)
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 63)
-  def _reduce_40(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 66)
+  def _reduce_41(val, _values, result)
                  begin
                raise "service #{val[1]} cannot be used as client" if @services.fetch(val[1]).map { |x| x[:dir] }.compact.any?
                result = constraint_service_to_hosts(val[1], val[2]).map { |item| item.merge(dir: :out) }
@@ -1541,8 +1571,8 @@ module_eval(<<'.,.,', 'parser.y', 63)
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 71)
-  def _reduce_41(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 74)
+  def _reduce_42(val, _values, result)
                  begin
                raise "service #{val[1]} cannot be used as server" if @services.fetch(val[1]).map { |x| x[:dir] }.compact.any?
                result = constraint_service_to_hosts(val[1], val[2]).map { |item| item.merge(dir: :in) }
@@ -1554,245 +1584,248 @@ module_eval(<<'.,.,', 'parser.y', 71)
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 78)
-  def _reduce_42(val, _values, result)
+module_eval(<<'.,.,', 'parser.y', 81)
+  def _reduce_43(val, _values, result)
      result = [val.compact.inject(:merge)]
     result
   end
 .,.,
 
-# reduce 43 omitted
-
-# reduce 44 omitted
-
-# reduce 45 omitted
+module_eval(<<'.,.,', 'parser.y', 83)
+  def _reduce_44(val, _values, result)
+     result = { log: true }
+    result
+  end
+.,.,
 
 module_eval(<<'.,.,', 'parser.y', 84)
-  def _reduce_46(val, _values, result)
-     result = { on: val[1][:value] }
+  def _reduce_45(val, _values, result)
+     result = {}
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 86)
+# reduce 46 omitted
+
+module_eval(<<'.,.,', 'parser.y', 87)
   def _reduce_47(val, _values, result)
-     result = { action: :block }
+     result = { on: val[1][:value] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 87)
+module_eval(<<'.,.,', 'parser.y', 89)
   def _reduce_48(val, _values, result)
-     result = { action: :pass }
+     result = { action: :block }
     result
   end
 .,.,
 
-# reduce 49 omitted
-
 module_eval(<<'.,.,', 'parser.y', 90)
-  def _reduce_50(val, _values, result)
-     result = { dir: val[1] }
+  def _reduce_49(val, _values, result)
+     result = { action: :pass }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 91)
+# reduce 50 omitted
+
+module_eval(<<'.,.,', 'parser.y', 93)
   def _reduce_51(val, _values, result)
-     result = { dir: val[0] }
+     result = { dir: val[1] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 93)
+module_eval(<<'.,.,', 'parser.y', 94)
   def _reduce_52(val, _values, result)
-     result = val[0] + [val[2]]
+     result = { dir: val[0] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 94)
+module_eval(<<'.,.,', 'parser.y', 96)
   def _reduce_53(val, _values, result)
-     result = val[0] + [val[1]]
+     result = val[0] + [val[2]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 95)
+module_eval(<<'.,.,', 'parser.y', 97)
   def _reduce_54(val, _values, result)
-     result = [val[0]]
+     result = val[0] + [val[1]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 97)
+module_eval(<<'.,.,', 'parser.y', 98)
   def _reduce_55(val, _values, result)
-     result = :in
+     result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 98)
+module_eval(<<'.,.,', 'parser.y', 100)
   def _reduce_56(val, _values, result)
-     result = :out
+     result = :in
     result
   end
 .,.,
 
-# reduce 57 omitted
-
 module_eval(<<'.,.,', 'parser.y', 101)
-  def _reduce_58(val, _values, result)
-     result = { af: :inet }
+  def _reduce_57(val, _values, result)
+     result = :out
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 102)
+# reduce 58 omitted
+
+module_eval(<<'.,.,', 'parser.y', 104)
   def _reduce_59(val, _values, result)
-     result = { af: :inet6 }
+     result = { af: :inet }
     result
   end
 .,.,
 
-# reduce 60 omitted
-
 module_eval(<<'.,.,', 'parser.y', 105)
-  def _reduce_61(val, _values, result)
-     result = { proto: val[2] }
+  def _reduce_60(val, _values, result)
+     result = { af: :inet6 }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 106)
+# reduce 61 omitted
+
+module_eval(<<'.,.,', 'parser.y', 108)
   def _reduce_62(val, _values, result)
-     result = { proto: val[1] }
+     result = { proto: val[2] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 108)
+module_eval(<<'.,.,', 'parser.y', 109)
   def _reduce_63(val, _values, result)
-     result = val[0] + [val[2]]
+     result = { proto: val[1] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 109)
+module_eval(<<'.,.,', 'parser.y', 111)
   def _reduce_64(val, _values, result)
-     result = val[0] + [val[1]]
+     result = val[0] + [val[2]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 110)
+module_eval(<<'.,.,', 'parser.y', 112)
   def _reduce_65(val, _values, result)
-     result = [val[0]]
+     result = val[0] + [val[1]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 112)
+module_eval(<<'.,.,', 'parser.y', 113)
   def _reduce_66(val, _values, result)
-     result = val[0][:value].to_sym
+     result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 114)
+module_eval(<<'.,.,', 'parser.y', 115)
   def _reduce_67(val, _values, result)
-     result = { from: val[1], to: val[3] }
+     result = val[0][:value].to_sym
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 115)
+module_eval(<<'.,.,', 'parser.y', 117)
   def _reduce_68(val, _values, result)
-     result = { from: val[1] }
+     result = { from: val[1], to: val[3] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 116)
+module_eval(<<'.,.,', 'parser.y', 118)
   def _reduce_69(val, _values, result)
-     result = { to: val[1] }
+     result = { from: val[1] }
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 117)
+module_eval(<<'.,.,', 'parser.y', 119)
   def _reduce_70(val, _values, result)
-     result = {}
+     result = { to: val[1] }
     result
   end
 .,.,
 
-# reduce 71 omitted
-
 module_eval(<<'.,.,', 'parser.y', 120)
-  def _reduce_72(val, _values, result)
+  def _reduce_71(val, _values, result)
      result = {}
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 122)
+# reduce 72 omitted
+
+module_eval(<<'.,.,', 'parser.y', 123)
   def _reduce_73(val, _values, result)
-     result = [{ host: nil, port: val[1] }]
+     result = {}
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 123)
+module_eval(<<'.,.,', 'parser.y', 125)
   def _reduce_74(val, _values, result)
-     result = [{ host: val[0], port: val[1] }]
+     result = [{ host: nil, port: val[1] }]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 124)
+module_eval(<<'.,.,', 'parser.y', 126)
   def _reduce_75(val, _values, result)
      result = [{ host: nil, port: val[0] }]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 125)
+module_eval(<<'.,.,', 'parser.y', 127)
   def _reduce_76(val, _values, result)
-     result = [{ host: val[1], port: val[3] }]
+     result = [{ host: val[0], port: val[1] }]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 126)
+module_eval(<<'.,.,', 'parser.y', 128)
   def _reduce_77(val, _values, result)
-     result = [{ host: @variables.fetch(val[0][:value]), port: val[1] }]
+     result = [{ host: val[1], port: val[3] }]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 127)
+module_eval(<<'.,.,', 'parser.y', 129)
   def _reduce_78(val, _values, result)
      result = Resolver.instance.resolv_srv(val[2][:value])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 128)
+module_eval(<<'.,.,', 'parser.y', 130)
   def _reduce_79(val, _values, result)
      result = Resolver.instance.resolv_apt_mirror(val[2][:value])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 130)
+module_eval(<<'.,.,', 'parser.y', 132)
   def _reduce_80(val, _values, result)
      result = val[2]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 131)
+module_eval(<<'.,.,', 'parser.y', 133)
   def _reduce_81(val, _values, result)
      result = val[1]
     result
@@ -1801,120 +1834,155 @@ module_eval(<<'.,.,', 'parser.y', 131)
 
 # reduce 82 omitted
 
-module_eval(<<'.,.,', 'parser.y', 134)
+module_eval(<<'.,.,', 'parser.y', 136)
   def _reduce_83(val, _values, result)
-     result = val[0] + [val[2]]
+     result = val[0] + val[2]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 135)
+module_eval(<<'.,.,', 'parser.y', 137)
   def _reduce_84(val, _values, result)
-     result = val[0] + [val[1]]
+     result = val[0] + val[1]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 136)
+module_eval(<<'.,.,', 'parser.y', 138)
   def _reduce_85(val, _values, result)
-     result = [val[0]]
+     result = val[0]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 138)
+module_eval(<<'.,.,', 'parser.y', 140)
   def _reduce_86(val, _values, result)
-     result = val[0][:value]
+     result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 139)
+module_eval(<<'.,.,', 'parser.y', 141)
   def _reduce_87(val, _values, result)
-     result = val[0][:value]
+     result = @variables.fetch(val[0][:value])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 140)
+module_eval(<<'.,.,', 'parser.y', 143)
   def _reduce_88(val, _values, result)
-     result = Range.new(val[0][:value], val[2][:value])
+     result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 142)
+module_eval(<<'.,.,', 'parser.y', 144)
   def _reduce_89(val, _values, result)
      result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 143)
+module_eval(<<'.,.,', 'parser.y', 145)
   def _reduce_90(val, _values, result)
-     result = val[0][:value]
+     result = Range.new(val[0][:value], val[2][:value])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 145)
+module_eval(<<'.,.,', 'parser.y', 147)
   def _reduce_91(val, _values, result)
-     result = val[0] + [val[2]]
+     result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 146)
+module_eval(<<'.,.,', 'parser.y', 148)
   def _reduce_92(val, _values, result)
-     result = val[0] + [val[1]]
+     result = val[0][:value]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 147)
+module_eval(<<'.,.,', 'parser.y', 150)
   def _reduce_93(val, _values, result)
-     result = [val[0]]
+     result = val[0] + val[2]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 149)
+module_eval(<<'.,.,', 'parser.y', 151)
   def _reduce_94(val, _values, result)
-     result = val[0].merge(val[2])
+     result = val[0] + val[1]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 150)
+module_eval(<<'.,.,', 'parser.y', 152)
   def _reduce_95(val, _values, result)
-     result = val[0].merge(val[1])
+     result = val[0]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 151)
+module_eval(<<'.,.,', 'parser.y', 154)
   def _reduce_96(val, _values, result)
-     result = {}
+     result = [val[0]]
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 153)
+module_eval(<<'.,.,', 'parser.y', 155)
   def _reduce_97(val, _values, result)
-     result = { rdr_to: [{ host: val[1][:value], port: val[3][:value] }] }
+     result = @variables.fetch(val[0][:value])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 154)
+module_eval(<<'.,.,', 'parser.y', 156)
   def _reduce_98(val, _values, result)
-     result = { rdr_to: [{ host: val[1][:value], port: nil }] }
+     result = Resolver.instance.resolv_azure_ip_range(val[2][:value])
     result
   end
 .,.,
 
-module_eval(<<'.,.,', 'parser.y', 155)
+module_eval(<<'.,.,', 'parser.y', 158)
   def _reduce_99(val, _values, result)
+     result = val[0].merge(val[2])
+    result
+  end
+.,.,
+
+module_eval(<<'.,.,', 'parser.y', 159)
+  def _reduce_100(val, _values, result)
+     result = val[0].merge(val[1])
+    result
+  end
+.,.,
+
+module_eval(<<'.,.,', 'parser.y', 160)
+  def _reduce_101(val, _values, result)
+     result = {}
+    result
+  end
+.,.,
+
+module_eval(<<'.,.,', 'parser.y', 162)
+  def _reduce_102(val, _values, result)
+     result = { rdr_to: [{ host: val[1][:value], port: val[3][:value] }] }
+    result
+  end
+.,.,
+
+module_eval(<<'.,.,', 'parser.y', 163)
+  def _reduce_103(val, _values, result)
+     result = { rdr_to: [{ host: val[1][:value], port: nil }] }
+    result
+  end
+.,.,
+
+module_eval(<<'.,.,', 'parser.y', 164)
+  def _reduce_104(val, _values, result)
      result = { nat_to: val[1][:value] }
     result
   end