On Mon, Aug 02, 2021 at 02:54:48PM +0200, Phil Sutter wrote: > On Mon, Aug 02, 2021 at 01:59:30PM +0200, Pablo Neira Ayuso wrote: > > On Mon, Aug 02, 2021 at 01:59:02PM +0200, Pablo Neira Ayuso wrote: > > > offlist > > > > actually not :) > > :D > > The file is written by store_table_in_file() in communication.c, writing > a struct ebt_replace plus a number of struct ebt_entries. At this point > I stopped, assuming that translating back and forth would involve too > much legacy cruft. Hm, so it looks like a memory dump of the ruleset blob representation into a file.