[Bug 580] iptables-restore and iptables-save lack comparison of a saved ruleset against the currently deployed rules

[bugzilla-daemon at bugzilla.netfilter.org]

http://bugzilla.netfilter.org/show_bug.cgi?id=580


jengelh at medozas.de changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|laforge at netfilter.org       |jengelh at medozas.de




------- Comment #1 from jengelh at medozas.de  2009-03-30 01:12 -------
>compare a saved ruleset (via iptables-save) to the currently active (deployed) set

So, what's wrong with the 'diff' utility?

  diff -dpru saved-rules.ipt <(iptables-save) >/dev/null

>because iptables-save does not always write tables in the same order

This is due to the order in /proc/net/ip_table_names, which happens to print
the tables from most-recently-loaded to least-recently-loaded. Guess something
should be done.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
You are the assignee for the bug, or are watching the assignee.