I apologise if this isn't the appropriate mailing list. Also, congratulations on the 3.13 inclusion, and 0.99 release! After browsing the code I didn't find any atomic ruleset update/restore functionality, as described by http://marc.info/?l=netfilter-devel&m=135959066918397&w=2 and present in iptables-restore and possibly pfctl -f ... If it's not currently implemented, I would suggest something like: # nft -f myruleset # cat rulesetset table filter { chain input { type filter hook input priority 0; ct state established accept ... so that the user can have a nicely formated firewall configuration file, applied by a simple command.-- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
