Anton <anton.khazan@xxxxxxxxx> wrote: > To be on the safe side, currently my scripts add sets separately from > adding rules and removing sets. I'd like to ask the devs, is it safe > under these conditions to attempt performing all these actions in one > atomic operation? Is previous firewall configuration guaranteed to be > successfully restored if the operation runs into OOM? Old config is removed after new transaction went through, not before.