On 1/4/2013 7:39 AM, Born Without wrote:
That is not true.
There also is the security table.
And if you have xtables-addons installed, there might also be the
rawpost table.
But any of those might not be loaded, if compiled in as loadable module.
So you might need to read /proc/net/ip_tables_names to work only on
existing tables, without loading unwanted/needed ones.
[...]
You can read For these specific cases.
But still it's not changing the basic concept which you don't need a new
binary to do all the above just add:
tables=`cat /proc/net/ip_tables_names`
He do have a point that adding this option he seeks is such a simple
task and can be added into iptables as a simple --rules-count or any
other directive.
I really don't know why and how this system works so if a binary works
it's fine by me.
The distance between the Binary file and this script is portability and
complexity.
Regards,
Eliezer
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
