[Bug 996] Add "replace" rule statement

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed Mar 9 18:56:22 CET 2016


https://bugzilla.netfilter.org/show_bug.cgi?id=996

--- Comment #2 from Pablo Neira Ayuso <pablo at netfilter.org> ---
Rule replacement is now available since:

commit 0721fbbe7a951a1e879d120c7a722012c38af9a6
Author: Carlos Falgueras García <carlosfg at riseup.net>
Date:   Tue Oct 27 12:58:07 2015 +0100

    src: Add command "replace" for rules

This is coming in the upcoming 0.6 release.

# nft list ruleset -a
table ip filter {
        chain input {
                ip protocol tcp counter packets 0 bytes 0 # handle 2
        }
}
# nft replace rule filter input handle 2 ip protocol udp counter
# nft list ruleset
table ip filter {
        chain input {
                ip protocol udp counter packets 0 bytes 0 
        }
}

Also documented in the wiki:

http://wiki.nftables.org/wiki-nftables/index.php/Simple_rule_management#Replacing_rules

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160309/00940635/attachment.html>


More information about the netfilter-buglog mailing list