Re: [iptables PATCH 1/2] nft: CMD_ZERO needs a rule cache

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [iptables PATCH 1/2] nft: CMD_ZERO needs a rule cache
From: Florian Westphal <fw@xxxxxxxxx>
Date: Fri, 15 Nov 2019 11:29:07 +0100
Cc: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>, netfilter-devel@xxxxxxxxxxxxxxx
In-reply-to: <20191115094725.19756-2-phil@nwl.cc>
User-agent: Mutt/1.10.1 (2018-07-13)

Phil Sutter <phil@xxxxxx> wrote:
> In order to zero rule counters, they have to be fetched from kernel. Fix
> this for both standalone calls as well as xtables-restore --noflush.

Reviewed-by: Florian Westphal <fw@xxxxxxxxx>

Follow-Ups:
- Re: [iptables PATCH 1/2] nft: CMD_ZERO needs a rule cache
  - From: Pablo Neira Ayuso

References:
- [iptables PATCH 0/2] Restore rule counter zeroing
  - From: Phil Sutter
- [iptables PATCH 1/2] nft: CMD_ZERO needs a rule cache
  - From: Phil Sutter

Prev by Date: [iptables PATCH 2/2] nft: Fix -Z for rules with NFTA_RULE_COMPAT
Next by Date: Re: [iptables PATCH 2/2] nft: Fix -Z for rules with NFTA_RULE_COMPAT
Previous by thread: [iptables PATCH 1/2] nft: CMD_ZERO needs a rule cache
Next by thread: Re: [iptables PATCH 1/2] nft: CMD_ZERO needs a rule cache
Index(es):
- Date
- Thread

[Index of Archives] [Netfitler Users] [Berkeley Packet Filter] [LARTC] [Bugtraq] [Yosemite Forum]

Powered by Linux