Is it possible to do atomic updates of netfilter-rules?
I.e something like:
iptables lock
iptables -F
iptables -A ..
iptables -A ..
..
iptables unlock

It would be even nicer, if this could be done without throwing all packets 
that arrive in the meantime out.

greetings
`Allan

Reply via email to