On mån, 2008-05-12 at 10:37 +0200, Jan Engelhardt wrote: > CC ip6tables.o > ../ip6tables.c: In function ‘do_command6’: > ../ip6tables.c:1730: error: ‘struct ip6t_entry’ has no member named ‘ip’ Sorry about that. Should be ipv6. > Other than that, I do not see a real difference the patch > makes over iptables-save. The difference is that iptables can dump a single chain, while iptables-save only a whole table. The other difference is that this gives "save" like capability to iptables-restore when used in a pipe, makging iptables-restore a more complete batch interface for talking to iptables which was the main motivation behind this. But you have a point in that chains and policies should be included in the output, just as they are in the human readable output. Additionally the count output format should probably be using -c when invoked by the iptables command.. Regards Henrik -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
