Ruleset creation process.

Ruleset creation process.

[Padam J Singh]

[-- Attachment #1: Type: text/plain, Size: 199 bytes --]

Is there are document that specifies the ruleset creation process?

I recently had an issue with destroy being called for old rules when 
adding a new rule for the same target.

Thanks!
Padam Singh.

Re: Ruleset creation process.

[Henrik Nordstrom]

On Sat, 2 Oct 2004, Padam J Singh wrote:

> Is there are document that specifies the ruleset creation process?

What part of the ruleset creation process?

> I recently had an issue with destroy being called for old rules when adding a 
> new rule for the same target.

Destroy of what, where?

If you refer to the match/target destroy functions being called then this 
is by design of iptables. Each modification to an iptable results in a 
new table being installed in the kernel and the old deleted.

Regards
Henrik

Re: Ruleset creation process.

[Padam J Singh]

[-- Attachment #1: Type: text/plain, Size: 907 bytes --]



Henrik Nordstrom wrote:

> On Sat, 2 Oct 2004, Padam J Singh wrote:
>
>> Is there are document that specifies the ruleset creation process?
>
>
> What part of the ruleset creation process?
>
>> I recently had an issue with destroy being called for old rules when 
>> adding a new rule for the same target.
>
>
> Destroy of what, where?
>
> If you refer to the match/target destroy functions being called then 
> this is by design of iptables. Each modification to an iptable results 
> in a new table being installed in the kernel and the old deleted.

Yes, I am talking about the target destroy functions.

What  is happening is that once i add a new rule, the old rule's
checktarget is called first then it's destroy, leaving my internal
states invalid.

So maybe I should traverse the rule link list and setup my internal
structures according to that?

>
> Regards
> Henrik
>
>
Regards,
Padam J Singh