Re: idempotent nft delete table? (or: why does "flush table" delete rules but keep chains?)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




> On 30 Apr 2020, at 05:26, trentbuck@xxxxxxxxx wrote:
> 
> A typical ruleset looks like
> 
>    flush ruleset
>    table filter { ... }
> 
> That works fine until I have several partial rulesets (e.g. the
> sysadmin, libvirtd, and sshguard) that manage their own tables in
> parallel, e.g.
> 

For various reasons, I construct a ruleset file and the first line or so comes from

	nft list tables | sed -n '/mytablename/s/^/delete /p'

Which leads me to wonder whether there is any meaningful difference between flush and delete unless you don't want to delete sets defined in the table[1].

jch


[1] https://wiki.nftables.org/wiki-nftables/index.php/Configuring_tables



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux