Re: libiptc - frustrating

[Biermann-Roemke@t-online.de (Karsten Römke)]

Harald Welte schrieb:
>>Question: how can I insert a rule from a running daemon in the fastest way:
>>1) calling a system("iptables ..."), don't know if the syntas is correct
>>2) doing the work again of analyzing the source code again
>>3) linking iptables.o to my application. I remember, that I've not done that
>>   because iptables never frees any memory - only allocates - not 
>>useful for a
>>   long time running program.
> 
> 
> this should be fixed now.

that would be nice, I think it's the easiest way for me

> 
> You have to consider a fourth option:
> 4) running iptables-restore --noflash and piping commands to stdin.


yes, I simply forgot this, will try this way, even if there are no more
memory leeks.
Can I use 1.2.7a or should I switch to 1.2.8?

> 
> Depending on your usage scenario (how frequent do you have ruleset
> changes?) this might be the fastest one.
It's for controlling internet access of pupil at a school.
I think every 1,5 h I have something about 100 changes in the tables.

Thank you
	Karsten