Re: [PATCH] iptables: add -C to check for existing rules

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tuesday 2011-03-08 12:56, Stefan Tomanek wrote:
>@@ -165,7 +167,8 @@ static const char commands_v_options[NUMBER_OF_CMD][NUMBER_OF_OPT] =
> /*DEL_CHAIN*/ {'x','x','x','x','x',' ','x','x','x','x','x','x'},
> /*SET_POLICY*/{'x','x','x','x','x',' ','x','x','x','x',' ','x'},
> /*RENAME*/    {'x','x','x','x','x',' ','x','x','x','x','x','x'},
>-/*LIST_RULES*/{'x','x','x','x','x',' ','x','x','x','x','x','x'}
>+/*LIST_RULES*/{'x','x','x','x','x',' ','x','x','x','x','x','x'},
>+/*CHECK*/     {'x',' ',' ',' ',' ',' ','x',' ',' ','x','x',' '}

This would make it impossible to check for a rule that used the fragment
test.

Does --lin even make sense with -C?

> };
> 
> static const int inverse_for_options[NUMBER_OF_OPT] =
>@@ -221,7 +224,7 @@ static void
> exit_printhelp(const struct xtables_rule_match *matches)
> {
> 	printf("%s v%s\n\n"
>-"Usage: %s -[AD] chain rule-specification [options]\n"
>+"Usage: %s -[ACD] chain rule-specification [options]\n"
> "       %s -I chain [rulenum] rule-specification [options]\n"
> "       %s -R chain rulenum rule-specification [options]\n"
> "       %s -D chain rulenum [options]\n"

The manpage is not updated.


Where is ip6tables support?
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux