From: "Покотиленко Костик" <casper@meteor.dp.ua>
To: martin f krafft <madduck@madduck.net>
Cc: Martijn Lievaart <m@rtij.nl>,
Jan Engelhardt <jengelh@computergmbh.de>,
netfilter discussion list <netfilter@vger.kernel.org>
Subject: Re: safely apply new rulesets: iptables-apply
Date: Thu, 17 Apr 2008 13:12:51 +0300 [thread overview]
Message-ID: <1208427171.4114.2.camel@casper.meteor.dp.ua> (raw)
In-Reply-To: <20080417080527.GE23974@piper.oerlikon.madduck.net>
В Чтв, 17/04/2008 в 10:05 +0200, martin f krafft пишет:
> also sprach Martijn Lievaart <m@rtij.nl> [2008.04.16.2356 +0200]:
> >> echo "Applying new rules...";
> >> iptables-restore <new.txt;
> >> if [ "$?" -ne 0 ]; then
> >> echo "Dude, that failed horribly. (Old rules still intact.)";
> >> exit 1;
> >> fi
> >
> > Are you sure? I think it may have committed some tables already and
> > errored on another.
>
> No, I am not sure. But wouldn't that be a bug? iptables-restore
> gives the impression to be transaction-oriented. It should be
> all-or-nothing, I think.
By default iptables-save generates file which COMMITs after each table.
Is it possible to COMMIT once for all tables at the end? If this is
possible - this will be the solution (all or nothing).
--
Покотиленко Костик <casper@meteor.dp.ua>
prev parent reply other threads:[~2008-04-17 10:12 UTC|newest]
Thread overview: 19+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-03-04 23:16 safely apply new rulesets: iptables-apply martin f krafft
2008-03-05 10:37 ` Maximilian Wilhelm
2008-03-05 11:42 ` martin f krafft
2008-03-05 11:46 ` martin f krafft
2008-03-05 11:56 ` 'queue' on 64-bit Scott MacKay
2008-03-05 12:59 ` martin f krafft
2008-03-09 16:45 ` safely apply new rulesets: iptables-apply Jan Engelhardt
2008-03-10 11:02 ` martin f krafft
2008-03-11 18:54 ` Jan Engelhardt
2008-03-11 19:00 ` martin f krafft
2008-03-11 19:30 ` Jan Engelhardt
2008-03-11 20:29 ` martin f krafft
2008-04-04 6:32 ` martin f krafft
2008-04-10 10:29 ` Jan Engelhardt
2008-04-10 13:34 ` martin f krafft
2008-04-10 13:44 ` martin f krafft
2008-04-16 21:56 ` Martijn Lievaart
2008-04-17 8:05 ` martin f krafft
2008-04-17 10:12 ` Покотиленко Костик [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1208427171.4114.2.camel@casper.meteor.dp.ua \
--to=casper@meteor.dp.ua \
--cc=jengelh@computergmbh.de \
--cc=m@rtij.nl \
--cc=madduck@madduck.net \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox