[Libvir] [patch 5/9] Include the iptables command and chain name in the saved rules file
Daniel P. Berrange
berrange at redhat.com
Mon Jan 7 15:23:57 UTC 2008
On Fri, Jan 04, 2008 at 03:57:30PM +0000, Mark McLoughlin wrote:
> lokkit --custom-rules expects the passed file to include the
> iptables command and chain name (e.g. "--inset INPUT") rather
> than just the rest of the arguments.
> Add both of those to what will be saved to the rules file
> and simplify the resulting code by splitting out a
> argvToString() helper function.
> The one complication is that when we're removing a rule
> we need to make sure we don't search for it using
> "--delete" rather than "--insert". For that reason,
> only change the argument to "--delete" once we've
> constructed the string we use to search through the
> existing rules.
|=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=|
|=- Perl modules: http://search.cpan.org/~danberr/ -=|
|=- Projects: http://freshmeat.net/~danielpb/ -=|
|=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|
More information about the libvir-list