Re: Creating rules without the /sbin/iptables command?

[Victor Julien <victor@nk.nl>]

Henrik Nordstrom wrote:
> On Thu, 18 Mar 2004, Victor Julien wrote:
> 
> 
>>using 'iptables-restore' (without noflush) is there a way to preserve 
>>the accounting data from the first rule?
> 
> Then you must use incremental commands, keepint the accounting rule 
> untouched.

Hmmm, that i don't want.

> 
>>Is this what the -c option of iptables-restore is for?
> 
> No. This instructs iptables-restore to restore any packet/byte counters 
> found in the input data. Without this option any such counters is ignored 
> and the installed rules have zeroed counters.

So i have to read the current counters first by parsing 
'iptables-save'-output. And i can then recreate the rules and set the 
counters to their old values?

Using 'iptables-restore' can i flush one chain, but leave another 
untouched? If so, i can create an accounting chain which will not be 
flushed...

Regards,
Victor

> 
> Regards
> Henrik
>