delete matching rule like it can be done in case of iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

nftables wiki [1] mentions this:

> Note: There are plans to support rule deletion by passing:
> % nft delete rule filter output ip saddr 192.168.1.1 counter

Any idea when will this happen? Because I thought it was very important feature. (unless I missed an alternate way to do it)

I want to migrate from iptables to nftables (from many years) but deleting a rule via script is not as easy as in case of iptables.

Obtaining the handle first and then deleting it is difficult programmatically.

Why is it difficult for nftables to find and delete matching rule?

Is there any ETA for this because its a roadblock for migrating my scripts.

Thank you,

Amish.

[1] https://wiki.nftables.org/wiki-nftables/index.php/Simple_rule_management#Removing_rules



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux