Re: [nf-next PATCH 0/2] Support resetting rules' state

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Oct 14, 2022 at 11:45:57PM +0200, Phil Sutter wrote:
> In order to "zero" a rule (in the 'iptables -Z' sense), users had to
> dump (parts of) the ruleset in stateless form and restore it again after
> removing the dumped parts.
> 
> Introduce a simpler method to reset any stateful elements of a rule or
> all rules of a chain/table/family. Affects both counter and quota
> expressions.

Patchset LGTM.

For the record, we agreed on the workshop to extend this to:

- add support for this command to table, chain and set objects too.
- validate that nft syntax is consistent from userspace with other
  existing commands (for example, list).

Thanks Phil.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux