From: Patrick McHardy <kaber@trash.net>
To: Anders Berggren <anders@halon.se>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: nftable atomic rule replacement/update/restore?
Date: Mon, 20 Jan 2014 23:30:55 +0000 [thread overview]
Message-ID: <20140120233055.GA17034@macbook.localnet> (raw)
In-Reply-To: <A2B302C7-AD8B-4239-BD8E-8E0FA29721B7@halon.se>
On Mon, Jan 20, 2014 at 10:10:50PM +0100, Anders Berggren wrote:
> I apologise if this isn't the appropriate mailing list. Also, congratulations on the 3.13 inclusion, and 0.99 release!
>
> After browsing the code I didn't find any atomic ruleset update/restore functionality, as described by http://marc.info/?l=netfilter-devel&m=135959066918397&w=2 and present in iptables-restore and possibly pfctl -f ...
>
> If it's not currently implemented, I would suggest something like:
>
> # nft -f myruleset
> # cat rulesetset
> table filter {
> chain input {
> type filter hook input priority 0;
> ct state established accept
> ...
>
> so that the user can have a nicely formated firewall configuration file, applied by a simple command.--
Yeah, that's exactly what we do. Basically the ruleset you get by
nftables list table ... is formated like this and can be parsed using
nft -f.
prev parent reply other threads:[~2014-01-20 23:31 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-01-20 21:10 nftable atomic rule replacement/update/restore? Anders Berggren
2014-01-20 23:30 ` Patrick McHardy [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140120233055.GA17034@macbook.localnet \
--to=kaber@trash.net \
--cc=anders@halon.se \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).