On Wed, Dec 29, 2004 at 09:52:18AM +0200, Shachar Shemesh wrote:

> b. How do you account for the entire rule numbers moving around due to 
> unexpected meddling with the rulebase. Think what happens if you have 
> both portsentry AND portknocking installed. They both add rules that 
> need to be expired...


  No need to search for the exact rule number in order to remove a rule.
One can remove a rule by its definition:

    iptables -A "the winner"
    iptables -R "the winner"

should work too.
  I still must be missing something.

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to