Skip to contentSkip to conversation

iptables-edit: tool to apply iptables rules to iptables-save'ed statefiles

PATCH New Peter Warasin 1 participant 1 message Oct 20, 2007 netfilter

lore
Share & tools
lore
#0 lore raw

cover iptables-edit: tool to apply iptables rules to iptables-save'ed statefiles

Hi guys

This patchset introduces a new tool called iptables-edit, which allows to apply iptables rules on an iptables-save'd state file instead of applying it to the kernel.

This allows to minimize the outage of firewall script which rebuild the entire ruleset from scratch when something changed within it's configuration.

It uses functionality from iptables-save and iptables-restore, therefore the patchset reorganizes those functionality in separate files.

The patchset is against iptables 1.3.8.

Please advice me if i should port it to another version or subversion repository.

I will start with man page and ip6tables-edit as well if the patch makes sense to you.

Please let me know what you think

Regards,
peter

Signature · 5 lines
:: e n d i a n
:: open source - open minds

:: peter warasin
:: http://www.endian.com   :: [email protected]