On Mon, Jan 20, 2014 at 10:10:50PM +0100, Anders Berggren wrote: > I apologise if this isn't the appropriate mailing list. Also, congratulations on the 3.13 inclusion, and 0.99 release! > > After browsing the code I didn't find any atomic ruleset update/restore functionality, as described by http://marc.info/?l=netfilter-devel&m=135959066918397&w=2 and present in iptables-restore and possibly pfctl -f ... > > If it's not currently implemented, I would suggest something like: > > # nft -f myruleset > # cat rulesetset > table filter { > chain input { > type filter hook input priority 0; > ct state established accept > ... > > so that the user can have a nicely formated firewall configuration file, applied by a simple command.-- Yeah, that's exactly what we do. Basically the ruleset you get by nftables list table ... is formated like this and can be parsed using nft -f. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
