Re: Extended IPTables options

[Andrew Beverley <andy@xxxxxxxxxxx>]

On Mon, 2012-01-30 at 08:40 +0100, Arnoud Tijssen wrote:
> I`m looking for the more sophisticated options of iptables/netfilter
> like: connmark, quota, qos, recent, netmap, tos, ulog, clustering and
> failover etc etc.

Have you tried the iptables man page? Personally I think that's pretty
well written and a good place to start. If you've got any specific
questions then feel free to post to this list.

> Is it possible to create a modular setup with iptables that offers the
> possibility to reload a specific part of the iptables rulebase instead
> of the entire rulebase.

You can add and remove rules "on the fly". There's no need to reload the
whole ruleset. Use "iptables -L  --line-numbers" to see all your rules
with associated rule number, and then use the "-D" command with that
number to delete as required.

Andy


--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html