Re: [iptables (nft-compat) PATCH 8/8] nft: Initialize according to requested table, if any

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Pablo,

Does it work the autochain load if you reload with rules in different
tables? eg. filter and raw.

Indeed, no... While chasing a bug (patch 7 is the result) I forgot to do this simple test.

I could overload struct builtin_table {} for that.
But I just figured out another issue here, it will work if only we don't have /etc/xtables.conf file.

If you have such file, when xtables-restore will insert rules, it will always call nft_xtables_config_load() thus always trying to initialize tables that might be already there.

So there is a bigger fix here: I will add necessary stuff in handle to keep track of parsed file like tables and store which one has been initialized and not.

Will come back with a better patch then.

Tomasz
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux