On Mon, 2012-01-30 at 08:40 +0100, Arnoud Tijssen wrote: > I`m looking for the more sophisticated options of iptables/netfilter > like: connmark, quota, qos, recent, netmap, tos, ulog, clustering and > failover etc etc. Have you tried the iptables man page? Personally I think that's pretty well written and a good place to start. If you've got any specific questions then feel free to post to this list. > Is it possible to create a modular setup with iptables that offers the > possibility to reload a specific part of the iptables rulebase instead > of the entire rulebase. You can add and remove rules "on the fly". There's no need to reload the whole ruleset. Use "iptables -L --line-numbers" to see all your rules with associated rule number, and then use the "-D" command with that number to delete as required. Andy -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
