On Sat, Nov 30, 2013 at 03:22:48PM -0800, Phil Oester wrote:
> <v2: attach the patch this time...>
>
> The current syntax when handling chains seems counterintuitive to me. I would
> expect that "add chain" would have the name of the chain directly after the
> keyword "chain". But instead, the name of the table is there, with the chain
> after. I think a better syntax might be this:
>
> add chain <table>/<chain>
Frankly, I prefer to leave the syntax as is in that regard.
But there are a couple of syntax aspect that would be worth discussing
before this is set in stone, eg. the `=>' in verdict maps.
The > symbol in the bash shell, if not escaped, results in a
redirection. We could replace it by ':', so the maps will look like:
add rule ip filter OUTPUT tcp dport vmap { \
22 : jump chain1, \
23 : jump chain2, \
}
Just in case we consider it worth to make it easier to run nft
commands from the bash shell.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
