From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 709DCC54FCB for ; Sat, 25 Apr 2020 16:54:10 +0000 (UTC) Received: from shelob.surriel.com (shelob.surriel.com [96.67.55.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 2E92220714 for ; Sat, 25 Apr 2020 16:54:09 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 2E92220714 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=vt.edu Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=kernelnewbies-bounces@kernelnewbies.org Received: from localhost ([::1] helo=shelob.surriel.com) by shelob.surriel.com with esmtp (Exim 4.92.3) (envelope-from ) id 1jSO3Y-0000pP-U1; Sat, 25 Apr 2020 12:53:32 -0400 Received: from omr2.cc.ipv6.vt.edu ([2607:b400:92:8400:0:33:fb76:806e] helo=omr2.cc.vt.edu) by shelob.surriel.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.92.3) (envelope-from ) id 1jSO3W-0000pF-2v for kernelnewbies@kernelnewbies.org; Sat, 25 Apr 2020 12:53:30 -0400 Received: from mr4.cc.vt.edu (mr4.cc.ipv6.vt.edu [IPv6:2607:b400:92:8300:0:7b:e2b1:6a29]) by omr2.cc.vt.edu (8.14.4/8.14.4) with ESMTP id 03PGrRas027405 for ; Sat, 25 Apr 2020 12:53:28 -0400 Received: from mail-qk1-f197.google.com (mail-qk1-f197.google.com [209.85.222.197]) by mr4.cc.vt.edu (8.14.7/8.14.7) with ESMTP id 03PGrMm0025843 for ; Sat, 25 Apr 2020 12:53:27 -0400 Received: by mail-qk1-f197.google.com with SMTP id c140so14274151qkg.23 for ; Sat, 25 Apr 2020 09:53:27 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:from:to:cc:subject:in-reply-to:references :mime-version:content-transfer-encoding:date:message-id; bh=cWjtlqsW/z3mUYbn0ASHOzWrV4ytiKgJ84N0Jz0GWJ0=; b=MWvaKm0qRVpUOVHoe5tfTqbkkck9hS7lrT9mQjMqYPhD6TP7K7raTu8o+rVqotuv4K qyf/afYz4aFn8rp7oXj0dNiSrV9reP6fEeAA4oe6Dlo92chMVN6ySh4rZjmERcJitBmG D6gq4hlExIPz/1Z09tEtJgKEwqocinaB66LbTuhShvXrQYfeUYB9Gp7MMdRGhepiaUsa yrFdgpQqBk7Bu15g9e2oJN7zpGIkcT9EG6SufVQMXOaeJqbPOanpS0/GNllqrRv+rq0f SrfIe1tDGWEX3pKQ9ZW+mopPrMbr8Gjz8ICDlKoyrx1PskaYKedy4sC9ywNj6/x6idMZ aJMw== X-Gm-Message-State: AGi0PuYXq56FcZzlSKtZyRDQEmCyf8poYmSXF+AUIahJ4sQvsO3TNqRC ekgSOUkepsISxpm5nXfPReQuNWYUTOdvgA1F1lN8aH6n8n3sm4Bu4SnfnASMVbG9p3bZroSiDRN Mr2c8nNQpWBPnlUp1HeBimuNdafzskUY0E33lFdc= X-Received: by 2002:ad4:4a27:: with SMTP id n7mr15056884qvz.80.1587833602364; Sat, 25 Apr 2020 09:53:22 -0700 (PDT) X-Google-Smtp-Source: APiQypLjbsOSRutLrkG4xqeh8D+VnUmcou9J1ys8DxdjW2udZwwtqrVDe59+kYWzVBIuJ+PeB0FAqg== X-Received: by 2002:ad4:4a27:: with SMTP id n7mr15056864qvz.80.1587833602041; Sat, 25 Apr 2020 09:53:22 -0700 (PDT) Received: from turing-police ([2601:5c0:c001:c9e1::359]) by smtp.gmail.com with ESMTPSA id j16sm831512qkl.118.2020.04.25.09.53.20 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 25 Apr 2020 09:53:20 -0700 (PDT) From: "Valdis Kl=?utf-8?Q?=c4=93?=tnieks" X-Google-Original-From: "Valdis Kl=?utf-8?Q?=c4=93?=tnieks" X-Mailer: exmh version 2.9.0 11/07/2018 with nmh-1.7+dev To: noloader@gmail.com Subject: Re: iptables and combining additional rule sources In-Reply-To: References: <40076.1587784014@turing-police> Mime-Version: 1.0 Date: Sat, 25 Apr 2020 12:53:19 -0400 Message-ID: <71633.1587833599@turing-police> Cc: kernelnewbies X-BeenThere: kernelnewbies@kernelnewbies.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Learn about the Linux kernel List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============6516390243056822964==" Errors-To: kernelnewbies-bounces@kernelnewbies.org --===============6516390243056822964== Content-Type: multipart/signed; boundary="==_Exmh_1587833599_5783P"; micalg=pgp-sha1; protocol="application/pgp-signature" Content-Transfer-Encoding: 7bit --==_Exmh_1587833599_5783P Content-Type: text/plain; charset=us-ascii On Sat, 25 Apr 2020 02:55:08 -0400, Jeffrey Walton said: > One last question... Should I create my own target - say mediawiki - > and append my rules to it? That may simplify things: > > * Header, newstuff and trailer is fixed > * newstuff just jumps to mediawiki target > * if mediawiki does not ban, then control returns to trailer > > Then, my out-of-proc service just keeps adding to mediawiki target. I > don't need to write files in this case. I'll just keep adding to the > running config. That totally fails if your machine reboots, because there's no memory of what the rules were before the reboot. --==_Exmh_1587833599_5783P Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Comment: Exmh version 2.9.0 11/07/2018 iQIVAwUBXqRq/gdmEQWDXROgAQInhBAAuLNvJALQNYxluHUC1oz5Jlm5lyE3xdDe UZKAwTLnQNBdPHfpNZcqaLSwF2V7EfFyCh286LtFTOWBkmfRhPcsOR1y43U4BS/T ILnz9x9Dc20JzZQY9SWXTjXT3aFSyPYcn1+kpaaj41u2X7rse7hE2YR5K3kh5fQQ /bcQfe9w1zYYEEd72TSy/whVuIBvRtegJt0yCUfvJn1qKQIpxPlKJCirnwQu/Adb IF6BjpDUeu5kgH2K0XbqAqU70up4A2/YLvHA5XhwEsu8BhVRdBpmLh1MLCTEDm96 K0Z00NC+hFyygYcPQVvjFikHhWL3PLGhvNpxPVo0vT4Z2VqGIU8vtnb+CkmgHJyX 4IT2Z2IWr5Wgmz7EDNk2NjwTezfCttJ+lI3cDj8ScfIrXSwQh7JCAmVDQAg0Uqxk anAaRGyjhv6DSx75vIAdI+XtQNkBW7BR+py6iz9dJIK5bQBixw+FUlMh9hgNki1a ZeFbuRpGgUCQvcH2p4wNJ37q3Q9IM6RMqO5r4iPdYZ8YSD7fgelcgy+QpatJSCsB +5+yXsj10lCfrUoIOAWtZa19yUurA7Mr/GWmEzFrqMKAQGGvJG6ixLfOYN/el1Cq SFRXSyIGlbfMTY283g3A15UqlwEitix91N5Tb0qlQpIC37x060BWb563zQrjJZhi YLYFtSGCuSg= =1std -----END PGP SIGNATURE----- --==_Exmh_1587833599_5783P-- --===============6516390243056822964== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies --===============6516390243056822964==--