On Wed, 2008-11-26 at 16:43 +0100, Thomas Jacob wrote:
> I'm looking for something that can frequently check this without having
> to transfer the whole ruleset from the kernel and decode it, which
> can take up a considerable amount of resources if you have a
> really huge rulesets (XXXk rules), in order to determine whether
> any rules are loaded yet.
What about /sys/module/iptable_{raw,nat,filter,mangle}/refcnt, is this
always zero when no chains and rules exist, and always >0 in the other
case?
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
