]> git.ipfire.org Git - thirdparty/iptables.git/commit
xtables-monitor: Print -X command for base chains, too master
authorPhil Sutter <phil@nwl.cc>
Tue, 22 Jul 2025 10:43:26 +0000 (12:43 +0200)
committerPhil Sutter <phil@nwl.cc>
Tue, 22 Jul 2025 14:48:11 +0000 (16:48 +0200)
commit8cb0c13b7777e72ca6f4265845dc99eff7cdf679
treed36dae0bd824dba5393e7a203e5b926b88cd4656
parentf66687b6cb5fd0bb36107c30339aa7f4ff75e98e
xtables-monitor: Print -X command for base chains, too

Since commit 61e85e3192dea ("iptables-nft: allow removal of empty
builtin chains"), the command may be applied to "builtin" chains as
well, so the output is basically valid.

Apart from that, since kernel commit a1050dd07168 ("netfilter:
nf_tables: Reintroduce shortened deletion notifications") the base chain
deletion notification does not contain NFTNL_CHAIN_PRIO (actually:
NFTA_HOOK_PRIORITY) attribute anymore so this implicitly fixes for
changed kernel behaviour.

Signed-off-by: Phil Sutter <phil@nwl.cc>
iptables/tests/shell/testcases/nft-only/0012-xtables-monitor_0
iptables/xtables-monitor.c