On Thu, Oct 31, 2013 at 09:20:16AM +0000, Daniel P. Berrange wrote: > > > > I believe you *can* update a filter while it is in use. NWFilter will > build the new ruleset, then switch over to it atomically. Thanks, I was not aware that one code re-define an existing nwfilter. Dan.