From: Patrick McHardy <kaber@trash.net>
To: Anders Berggren <anders@halon.se>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: nftable atomic rule replacement/update/restore?
Date: Mon, 20 Jan 2014 23:30:55 +0000 [thread overview]
Message-ID: <20140120233055.GA17034@macbook.localnet> (raw)
In-Reply-To: <A2B302C7-AD8B-4239-BD8E-8E0FA29721B7@halon.se>
On Mon, Jan 20, 2014 at 10:10:50PM +0100, Anders Berggren wrote:
> I apologise if this isn't the appropriate mailing list. Also, congratulations on the 3.13 inclusion, and 0.99 release!
>
> After browsing the code I didn't find any atomic ruleset update/restore functionality, as described by http://marc.info/?l=netfilter-devel&m=135959066918397&w=2 and present in iptables-restore and possibly pfctl -f ...
>
> If it's not currently implemented, I would suggest something like:
>
> # nft -f myruleset
> # cat rulesetset
> table filter {
> chain input {
> type filter hook input priority 0;
> ct state established accept
> ...
>
> so that the user can have a nicely formated firewall configuration file, applied by a simple command.--
Yeah, that's exactly what we do. Basically the ruleset you get by
nftables list table ... is formated like this and can be parsed using
nft -f.
prev parent reply other threads:[~2014-01-20 23:31 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-01-20 21:10 nftable atomic rule replacement/update/restore? Anders Berggren
2014-01-20 23:30 ` Patrick McHardy [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140120233055.GA17034@macbook.localnet \
--to=kaber@trash.net \
--cc=anders@halon.se \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.