* Ruleset creation process.
@ 2004-10-02 10:32 Padam J Singh
2004-10-03 16:07 ` Henrik Nordstrom
0 siblings, 1 reply; 3+ messages in thread
From: Padam J Singh @ 2004-10-02 10:32 UTC (permalink / raw)
To: netfilter-devel
[-- Attachment #1: Type: text/plain, Size: 199 bytes --]
Is there are document that specifies the ruleset creation process?
I recently had an issue with destroy being called for old rules when
adding a new rule for the same target.
Thanks!
Padam Singh.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Ruleset creation process.
2004-10-02 10:32 Ruleset creation process Padam J Singh
@ 2004-10-03 16:07 ` Henrik Nordstrom
2004-10-04 6:25 ` Padam J Singh
0 siblings, 1 reply; 3+ messages in thread
From: Henrik Nordstrom @ 2004-10-03 16:07 UTC (permalink / raw)
To: Padam J Singh; +Cc: netfilter-devel
On Sat, 2 Oct 2004, Padam J Singh wrote:
> Is there are document that specifies the ruleset creation process?
What part of the ruleset creation process?
> I recently had an issue with destroy being called for old rules when adding a
> new rule for the same target.
Destroy of what, where?
If you refer to the match/target destroy functions being called then this
is by design of iptables. Each modification to an iptable results in a
new table being installed in the kernel and the old deleted.
Regards
Henrik
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Ruleset creation process.
2004-10-03 16:07 ` Henrik Nordstrom
@ 2004-10-04 6:25 ` Padam J Singh
0 siblings, 0 replies; 3+ messages in thread
From: Padam J Singh @ 2004-10-04 6:25 UTC (permalink / raw)
To: Henrik Nordstrom; +Cc: netfilter-devel
[-- Attachment #1: Type: text/plain, Size: 907 bytes --]
Henrik Nordstrom wrote:
> On Sat, 2 Oct 2004, Padam J Singh wrote:
>
>> Is there are document that specifies the ruleset creation process?
>
>
> What part of the ruleset creation process?
>
>> I recently had an issue with destroy being called for old rules when
>> adding a new rule for the same target.
>
>
> Destroy of what, where?
>
> If you refer to the match/target destroy functions being called then
> this is by design of iptables. Each modification to an iptable results
> in a new table being installed in the kernel and the old deleted.
Yes, I am talking about the target destroy functions.
What is happening is that once i add a new rule, the old rule's
checktarget is called first then it's destroy, leaving my internal
states invalid.
So maybe I should traverse the rule link list and setup my internal
structures according to that?
>
> Regards
> Henrik
>
>
Regards,
Padam J Singh
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2004-10-04 6:25 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-10-02 10:32 Ruleset creation process Padam J Singh
2004-10-03 16:07 ` Henrik Nordstrom
2004-10-04 6:25 ` Padam J Singh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.