Skip to content

iptables-edit: tool to apply iptables rules to iptables-save'ed statefiles

Peter Warasin netfilter-devel 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest3 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3iptables-edit: adds --table to iptables-restoreiptables-restore.c+11 -10 replies
2/3iptables-edit: source out functionality to separate .c filesMakefile iptables-restore-lib.c iptables-restore-lib.h +4 more+738 -6520 replies
3/3iptables-edit: introduces iptables-edit cli toolMakefile iptables-edit.c iptables-multi.c+280 -30 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/3] iptables-edit: tool to apply iptables rules to iptables-save'ed statefiles

Hi guys

This patchset introduces a new tool called iptables-edit, which allows to apply iptables rules on an iptables-save'd state file instead of applying it to the kernel.

This allows to minimize the outage of firewall script which rebuild the entire ruleset from scratch when something changed within it's configuration.

It uses functionality from iptables-save and iptables-restore, therefore the patchset reorganizes those functionality in separate files.

The patchset is against iptables 1.3.8.

Please advice me if i should port it to another version or subversion repository.

I will start with man page and ip6tables-edit as well if the patch makes sense to you.

Please let me know what you think

Regards,
peter

Signature · 5 lines
:: e n d i a n
:: open source - open minds

:: peter warasin
:: http://www.endian.com   :: [email protected]