On Saturday 2011-10-01 17:19, Richard Weinberger wrote: >This patch set adds a switch to iptables-save to select >a specific chain to be saved. > >Sometimes it's useful to save only one chain. >E.g. When some rules are added dynamically by daemons like >OpenVPN or strongSwan and the base rule set is generated by >a bash script. > >iptables-save -t filter -C DYN_OVPN > /tmp/dyn-rules iptables -S can already select chains and even single rules. We are getting to the point where things are implemented redundantly.. hm. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html