Re: Reload IPtables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon 28/Jun/2021 12:17:11 +0200 Reindl Harald wrote:
Am 28.06.21 um 11:23 schrieb Alessandro Vesely:
A complex script doesn't have to be error prone.

it is by definition more error prone than a simple restore which has exactly that job and it makes no sense to argue about such simple facts


As Kerin showed, restore is not intrinsically simpler, as it has to deal with the same amount of data. It is only laid down in a different format. The shell format is more verbose, but has some advantages:

* it allows to test each single command separately, and

* its format is time-honored and fully documented.


do what you want but stop talking nonsense when it comes to best practice


One "best practice" that I'd object to is blindly restoring whatever was saved on shutdown. How can one control that? Booting with some clean, well-defined data looks safer.


Best
Ale
--
























[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux