Re: iptables doubt

[varun <varun@rocsys.com>]

Yeah it is true but this can done only after safe but not dynamically? 
Is there a way to do dynamically?

Varun







Sven-Haegar Koch wrote:

> On Thu, 13 Apr 2006, varun wrote:
>
>>                         The features i want to implement like that 
>> priority for policy is that imagine a scenario where user added some 
>> policies and then for some reason wants one policy to be checked 
>> before checking others then he would have to add the policy again and 
>> delete the old policy isint it?
>
>
> Every iptables rule change is loading the whole ruleset into 
> userspace, modifying it, and copying the result back into kernelspace.
>
> So you should be able to fetch the rules (f.e. with iptables-save), 
> modify them as you like, and push them back (iptables-restore).
>
> c'ya
> sven
>