From 96296cfb7e01298234c7fa9403619f50391620d1 Mon Sep 17 00:00:00 2001 From: Henrik Nordstrom Date: Tue, 13 May 2008 13:08:26 +0200 Subject: iptables --list-rules command Adds iptables --list-rules (-S) command, acting as a combination of iptables --list and iptables-save. The primary motivation behind this patch is to get iptables-save like output capabilities in iptables-restore, allowing "iptables-restore -n" to be used as a consistent API to iptables for all kind of operations, not only blind updates.. As a bonus iptables also gets the capability of printing the rules as-is. This completely replaces the earlier patch which added the --rules option. Henrik Nordstrom --- include/iptables.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'include/iptables.h') diff --git a/include/iptables.h b/include/iptables.h index e5f8b400..ecc7168f 100644 --- a/include/iptables.h +++ b/include/iptables.h @@ -23,6 +23,8 @@ extern int flush_entries(const ipt_chainlabel chain, int verbose, iptc_handle_t *handle); extern int for_each_chain(int (*fn)(const ipt_chainlabel, int, iptc_handle_t *), int verbose, int builtinstoo, iptc_handle_t *handle); +extern void print_rule(const struct ipt_entry *e, + iptc_handle_t *handle, const char *chain, int counters); /* kernel revision handling */ extern int kernel_version; -- cgit v1.2.3