From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jesper Dangaard Brouer Subject: Re: [nftables PATCH] rule: display rule handle as comment Date: Wed, 22 May 2013 15:53:26 +0200 (CEST) Message-ID: References: <1369091340-29211-1-git-send-email-eric@regit.org> Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: Netfilter Developers , Jesper Brouer To: Eric Leblond Return-path: Received: from mgw2.diku.dk ([130.225.96.92]:52013 "EHLO mgw2.diku.dk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755417Ab3EVOMz (ORCPT ); Wed, 22 May 2013 10:12:55 -0400 In-Reply-To: <1369091340-29211-1-git-send-email-eric@regit.org> Sender: netfilter-devel-owner@vger.kernel.org List-ID: On Tue, 21 May 2013, Eric Leblond wrote: > Knowing the rule handle is necessary to be able to delete a single > rule. It was not displayed till now in the output and it was thus > impossible to remove a single rule. The current iptables system supports deleting a specific rule by simply specifying iptables -D [...] instead of equivilant iptables -A [...] Would it be possible to keep this semantics in nftables? Hilsen Jesper Brouer -- ------------------------------------------------------------------- MSc. Master of Computer Science Dept. of Computer Science, University of Copenhagen Author of http://www.adsl-optimizer.dk -------------------------------------------------------------------