[LARTC] reset rules ?

[LARTC] reset rules ?

[fabio]

Dear All
 Do you know if its possible to reset the rule with a single command or 
if I must delete manually all the rule ?
thanks

Fabien

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] reset rules ?

[Martin A. Brown]

Fabio,

I use  a short snippet of shell to do it:

# ip rule show | grep -Ev '^(0|3276(6|7)):' \
>  |  while read PRIO RULE  ; do \
>     ip rule del prio ${PRIO%:} $RULE
>  done

I'm not aware of a more elegant way to do this.  Anybody else?

-Martin

On Tue, 19 Nov 2002, fabio wrote:

 : Dear All
 :  Do you know if its possible to reset the rule with a single command or 
 : if I must delete manually all the rule ?
 : thanks
 : 
 : Fabien
 : 
 : _______________________________________________
 : LARTC mailing list / LARTC@mailman.ds9a.nl
 : http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
 : 

-- 
Martin A. Brown --- SecurePipe, Inc. --- mabrown@securepipe.com


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] reset rules ?

[fabio]

[-- Attachment #1: Type: text/plain, Size: 1048 bytes --]

Thank you Martin, but an other thing how delete this type of rule :
32761:  from all to 172.18.200.6 lookup main

When I try with your script and the command  : ip rule del from all to 
172.18.200.6 lookup main
the result is the same :  Error: an inet prefix is expected rather than 
"all"
thks

Fabio
 
Martin A. Brown a écrit:

>Fabio,
>
>I use  a short snippet of shell to do it:
>
># ip rule show | grep -Ev '^(0|3276(6|7)):' \
>  
>
>> |  while read PRIO RULE  ; do \
>>    ip rule del prio ${PRIO%:} $RULE
>> done
>>    
>>
>
>I'm not aware of a more elegant way to do this.  Anybody else?
>
>-Martin
>
>On Tue, 19 Nov 2002, fabio wrote:
>
> : Dear All
> :  Do you know if its possible to reset the rule with a single command or 
> : if I must delete manually all the rule ?
> : thanks
> : 
> : Fabien
> : 
> : _______________________________________________
> : LARTC mailing list / LARTC@mailman.ds9a.nl
> : http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
> : 
>
>  
>


[-- Attachment #2: Type: text/html, Size: 1704 bytes --]

Re: [LARTC] reset rules ?

[Martin A. Brown]

Yes,

I rarely use "all", but have used it for NAT rules in the past.

Here's a snippet I've used for NAT rules, you'll need to fix it to handle 
all rules, but I'll leave that as an exercise to you:

<snip>

  ip rule show | grep  map-to | while read PRIO NATRULE; do
    ip rule del prio ${PRIO%%:*} $( echo $NATRULE | sed 's|all|0/0|' )
  done

</snip>

If you wish to see the entire script, check out:

 script file:   http://plorf.net/linux-ip/html/scripts/nat
 config file:   http://plorf.net/linux-ip/html/scripts/static-nat

Good luck,

-Martin

On Wed, 20 Nov 2002, fabio wrote:

 : Thank you Martin, but an other thing how delete this type of rule :
 : 32761:  from all to 172.18.200.6 lookup main
 : 
 : When I try with your script and the command  : ip rule del from all to 
 : 172.18.200.6 lookup main
 : the result is the same :  Error: an inet prefix is expected rather than 
 : "all"
 : thks
 : 
 : Fabio
 :  
 : Martin A. Brown a écrit:
 : 
 : >Fabio,
 : >
 : >I use  a short snippet of shell to do it:
 : >
 : ># ip rule show | grep -Ev '^(0|3276(6|7)):' \
 : >  
 : >
 : >> |  while read PRIO RULE  ; do \
 : >>    ip rule del prio ${PRIO%:} $RULE
 : >> done
 : >>    
 : >>
 : >
 : >I'm not aware of a more elegant way to do this.  Anybody else?
 : >
 : >-Martin
 : >
 : >On Tue, 19 Nov 2002, fabio wrote:
 : >
 : > : Dear All
 : > :  Do you know if its possible to reset the rule with a single command or 
 : > : if I must delete manually all the rule ?
 : > : thanks
 : > : 
 : > : Fabien
 : > : 
 : > : _______________________________________________
 : > : LARTC mailing list / LARTC@mailman.ds9a.nl
 : > : http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
 : > : 
 : >
 : >  
 : >
 : 
 : 

-- 
Martin A. Brown --- SecurePipe, Inc. --- mabrown@securepipe.com


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/