Re: [nf_tables PATCH] netfilter: nf_tables: invert chain deletion abort path

On 14 April 2016 at 12:24, Pablo Neira Ayuso wrote: > > Thanks for coming up with this Arturo. > > I have a better way to fix this by not adding/removing the objects to > the lists. > > Ping me back if I don't come up with the fix anytime soon. ping :-) -- Arturo Borrero

Re: [nf_tables PATCH] netfilter: nf_tables: invert chain deletion abort path

On Fri, Apr 08, 2016 at 12:56:10PM +0200, Arturo Borrero Gonzalez wrote: > Before this patch, chain deletetion abort path re-add chains in reverse > order of what was originally in the ruleset. > Invert the order, so the ruleset is exactly the same after abort. > > Example, using 2 config files:

[nf_tables PATCH] netfilter: nf_tables: invert chain deletion abort path

Before this patch, chain deletetion abort path re-add chains in reverse order of what was originally in the ruleset. Invert the order, so the ruleset is exactly the same after abort. Example, using 2 config files: ruleset_good.nft: 8< flush ruleset table ip t { chain c1 {