We currently only support "add table" and "add chain" with NLM_F_EXCL. This means we can't replace entire tables without a lot of extra effort, also its not possible to create tables/chains just in case they don't already exist. To fix this, I'd propose to add two new commands, so we have the following: - add: add without NLM_F_EXCL - create: add with NLM_F_EXCL - replace: replace the entire thing This most likely will also require updates to the transaction handling so we don't only process rules, but table, chain and set updates in a transaction. Comments? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
