On Sun, 2011-06-05 at 22:45 +0200, Jan-Frode Myklebust wrote: > --- > func/minion/modules/iptables/__init__.py | 15 ++++++++++++++- > 1 files changed, 14 insertions(+), 1 deletions(-) > > diff --git a/func/minion/modules/iptables/__init__.py b/func/minion/modules/iptables/__init__.py > index db11a23..ccc7645 100644 > --- a/func/minion/modules/iptables/__init__.py > +++ b/func/minion/modules/iptables/__init__.py > @@ -12,6 +12,7 @@ > # our modules > from func.minion.modules import func_module > from func.minion.modules.iptables.common import * > +import re > > IPTABLES_SAVE_FILE = "/etc/sysconfig/iptables" > > @@ -111,7 +112,19 @@ class Iptables(func_module.FuncModule): > return call_if_policy("INPUT", "DROP", "-I OUTPUT -d %s -j ACCEPT" % ip) iptables-save has -c option and it appears it is defaulting to on your system? take a look at the man page: -c, --counters include the current values of all packet and byte counters in the output b/c it seems to be behaving on mine. -sv _______________________________________________ Func-list mailing list Func-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/func-list