hi ya john On Wed, Aug 05, 2015 at 04:22:36PM -0400, John Miller wrote: > On Wed, Aug 5, 2015 at 3:30 PM, alvin > <alvin.sm@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote: ... > > how and what would you want to change for the output of "iptables -nvL" > > > > Hi Alvin, > > What I'd really like is something like (let's see how well this displays): > > --filter table-- > > INPUT (policy reject) > PREROUTING, OUTPUT, FORWARD, user-defined top-level chains, etc. > | > --------------------------------------------- > | | | > Rule1 INPUT_USERCHAIN1 INPUT_USERCHAIN2 > Rule2 | | | > Rule3 Rule1 SUBCHAIN1 Rule1 > Rule4 Rule2 | Rule2 > Rule3 Rule1 Rule3 > Rule4 Rule2 Rule4 > Rule3 > Rule4 > > --nat table, mangle table, etc.-- doesn't look/sound like a "simple firewall" anymore :-) reformatting the rules seems to be a job for perl or c :-) i have "no immediate solution" pixie dust alvin # IPtables-BlackList.net > This is definitely not something I expect to see from iptables -nvL, > but more as a shell script or separate standalone utility. If I can > accomplish something like this with a simple pipe or two (like to > gnuplot, for example), that'd be fine, too. I figured there might be > an existing tool for this, or a relatively simple shell script that > someone had run before. > > John -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
