Is it possible to do atomic updates of netfilter-rules? I.e something like: iptables lock iptables -F iptables -A .. iptables -A .. .. iptables unlock
It would be even nicer, if this could be done without throwing all packets that arrive in the meantime out. greetings `Allan