diff options
| author | Florian Westphal <fw@strlen.de> | 2019-04-23 15:16:23 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2019-04-27 01:08:48 +0200 |
| commit | 77e6a93d5c9dcb58c3e573c9a14710fadbbc001a (patch) | |
| tree | 84f6e812a02594dc25c59870d211e2836ede23b8 /extensions/libipt_ECN.c | |
| parent | 862818ac3a0de5642444dfc9aa06e0f6fbb3ef38 (diff) | |
xtables: add and set "implict" flag on transaction objects
Its used to flag the rule flushes that get added in user-defined-chains
that get redefined with --noflush.
IOW, those objects that are added not by explicit instruction but
to keep semantics.
With --noflush, iptables-legacy-restore will behave as if
-F USERCHAIN was given, in case USERCHAIN exists and USERCHAIN gets
redefined, i.e.:
iptables-save v1.8.2 on Thu Apr 18 17:11:05 2019
*filter
:USERCHAIN - [0:0]
COMMIT
... will remove all existing rules from USERCHAIN.
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions/libipt_ECN.c')
0 files changed, 0 insertions, 0 deletions