From mboxrd@z Thu Jan 1 00:00:00 1970 From: "U.Mutlu" Subject: Re: libiptc or alternative Date: Mon, 07 Nov 2011 03:09:27 +0100 Message-ID: References: <20111107010219.GA30000@1984> <20111107010309.GB30000@1984> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20111107010309.GB30000@1984> Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@vger.kernel.org Pablo Neira Ayuso wrote, On 2011-11-07 02:03: > On Mon, Nov 07, 2011 at 02:02:19AM +0100, Pablo Neira Ayuso wrote: >> On Fri, Nov 04, 2011 at 09:14:13PM +0100, U.Mutlu wrote: >>> Hi, >>> in my userland-app I'm calling the iptables binary to add and >>> to remove iptables rules, but after moving to a Gigabit-Link >>> I need a faster method. >>> libiptc seems to fit the job but then it seems to be 'deprecated', is it really? >>> Is there a successor to it, or other alternatives? >>> Can I still use libiptc on a system where iptables v1.4.12 is installed? >> >> Pipe commands to iptables-save. > > Sorry, I meant to say iptables-restore, of course. Hmm. I think in my case this method is suboptiomal because my iptables rules do change very frequently (ie. banning individual ip's at different times and then unbanning each after say x minutes, again individually, ie. not as a group). I think in this case I should stick with libiptc since it's still part of the official iptables distribution.