* short circuit evaluations?
@ 2011-02-20 23:04 Valentijn Sessink
2011-02-20 23:28 ` Jan Engelhardt
0 siblings, 1 reply; 2+ messages in thread
From: Valentijn Sessink @ 2011-02-20 23:04 UTC (permalink / raw)
To: netfilter
Hello list,
Does iptables do short circuit evaluation?
Let me try to explain. I now have:
iptables -A chain -m recent --name evil \
--seconds 900 --hitcount 15 -j block
iptables -A block -m recent --name block --set
If iptables does short circuit evaluation and it does this reliably
(i.e. by design/documented/will not change without warning), then I can
replace this with:
iptables -A chain -m recent --name evil \
--seconds 900 --hitcount 15 \
-m recent --name block --set
(Which is much harder to read, so much safer. HHOK ;)
Best regards,
Valentijn
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: short circuit evaluations?
2011-02-20 23:04 short circuit evaluations? Valentijn Sessink
@ 2011-02-20 23:28 ` Jan Engelhardt
0 siblings, 0 replies; 2+ messages in thread
From: Jan Engelhardt @ 2011-02-20 23:28 UTC (permalink / raw)
To: Valentijn Sessink; +Cc: netfilter
On Monday 2011-02-21 00:04, Valentijn Sessink wrote:
> Hello list,
>
> Does iptables do short circuit evaluation?
Certainly.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2011-02-20 23:28 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-02-20 23:04 short circuit evaluations? Valentijn Sessink
2011-02-20 23:28 ` Jan Engelhardt
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.