Re: [libvirt] [libvirt PATCHv3 05/10] allow chain modification

2011-10-17 Thread Stefan Berger
On 10/17/2011 01:58 PM, David Stevens wrote: Stefan Berger wrote on 10/17/2011 10:31:29 AM: was not. Yes, then I understood this correctly. See the other mails regarding the problems I am seeing with it. If there was a way to figure out at what position to insert a rule into an existing chai

Re: [libvirt] [libvirt PATCHv3 05/10] allow chain modification

2011-10-17 Thread David Stevens
Stefan Berger wrote on 10/17/2011 10:31:29 AM: > > was not. > Yes, then I understood this correctly. See the other mails regarding the > problems I am seeing with it. If there was a way to figure out at what > position to insert a rule into an existing chain, i.e. at position 5, > rather th

Re: [libvirt] [libvirt PATCHv3 05/10] allow chain modification

2011-10-17 Thread Stefan Berger
On 10/17/2011 01:23 PM, David Stevens wrote: Stefan Berger wrote on 10/17/2011 09:07:12 AM: On 10/12/2011 03:50 PM, David L Stevens wrote: This patch adds the internal capability to add rules to existing chains instead of using temporary chains and to generate placeholders for chains th

Re: [libvirt] [libvirt PATCHv3 05/10] allow chain modification

2011-10-17 Thread David Stevens
Stefan Berger wrote on 10/17/2011 09:07:12 AM: > On 10/12/2011 03:50 PM, David L Stevens wrote: > >This patch adds the internal capability to add rules to existing > > chains instead of using temporary chains and to generate placeholders for > > chains that are referenced without generating

Re: [libvirt] [libvirt PATCHv3 05/10] allow chain modification

2011-10-17 Thread Stefan Berger
On 10/12/2011 03:50 PM, David L Stevens wrote: This patch adds the internal capability to add rules to existing chains instead of using temporary chains and to generate placeholders for chains that are referenced without generating a rule for them immediately. Finally, it includes variabl

[libvirt] [libvirt PATCHv3 05/10] allow chain modification

2011-10-12 Thread David L Stevens
This patch adds the internal capability to add rules to existing chains instead of using temporary chains and to generate placeholders for chains that are referenced without generating a rule for them immediately. Finally, it includes variable matching for filter instantiation (i.e., instan