Re: [PATCH] Drop iptables-save comments and chain counters from iptables inventory.

[seth vidal <skvidal@xxxxxxxxxxxxxxxxx>]

On Sun, 2011-06-05 at 22:45 +0200, Jan-Frode Myklebust wrote:
> ---
>  func/minion/modules/iptables/__init__.py |   15 ++++++++++++++-
>  1 files changed, 14 insertions(+), 1 deletions(-)
> 
> diff --git a/func/minion/modules/iptables/__init__.py b/func/minion/modules/iptables/__init__.py
> index db11a23..ccc7645 100644
> --- a/func/minion/modules/iptables/__init__.py
> +++ b/func/minion/modules/iptables/__init__.py
> @@ -12,6 +12,7 @@
>  # our modules
>  from func.minion.modules import func_module
>  from func.minion.modules.iptables.common import *
> +import re
>  
>  IPTABLES_SAVE_FILE = "/etc/sysconfig/iptables"
>  
> @@ -111,7 +112,19 @@ class Iptables(func_module.FuncModule):
>          return call_if_policy("INPUT", "DROP", "-I OUTPUT -d %s -j ACCEPT" % ip)

iptables-save has -c option and it appears it is defaulting to on your
system?

take a look at the man page:
   -c, --counters
     include  the  current  values of all packet and byte counters in
     the output


b/c it seems to be behaving on mine.
-sv


_______________________________________________
Func-list mailing list
Func-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/func-list