>>There is no doubt that for nftables frontends will be written too, so the question is: >>"Will nfatbles be able to find out various information >>about their own current state: tables, chains, rules, etc?" JE> You can already obtain this information by using libiptc, iterating over JE> all rules and testing for a particular src/dst address (very much like JE> poor man's `grep -s 1.2.3.4\b` on the text output). According to Wikipedia "libiptc ... shouldn't be used as a public API, and is known to change, which breaks programs that use it" and libiptc is a 3d party project - not netfilter.org's and outdated, isn't it? As for nftables: means native capabilities of it's kernelspace code (aka virtual machine). -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
