based on looking at some of the myriad of iptables script examples out
on the net, i am slightly confused about some of the examples i've seen:

  first, i've seen at least a couple of scripts that flush a user-defined
script before deleting it, as in:

  iptables -F <chain>
  iptables -X <chain>

from what i've read, all that's necessary to delete a chain is that there
are no other references to it.  must it also be empty?  that's certainly
not mentioned in the man page for iptables.

  second, i've run across a script that resets a user-defined chain by 
doing the following series of steps:

  iptables -F <chain>
  iptables -X <chain>
  iptables -N <chain>


isn't this overkill?  how exactly does this differ from just flushing it?

rday


Reply via email to