Pablo Neira Ayuso 9ddf632357 netfilter: nf_tables: add support for dormant tables
This patch allows you to temporarily disable an entire table.
You can change the state of a dormant table via NFT_MSG_NEWTABLE
messages. Using this operation you can wake up a table, so their
chains are registered.

This provides atomicity at chain level. Thus, the rule-set of one
chain is applied at once, avoiding any possible intermediate state
in every chain. Still, the chains that belongs to a table are
registered consecutively. This also allows you to have inactive
tables in the kernel.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2013-10-14 18:00:57 +02:00
..
2013-10-14 17:15:48 +02:00
2013-10-10 14:37:35 -04:00
2013-10-14 11:29:31 +02:00
2013-09-23 16:52:45 -04:00
2013-09-03 22:34:47 -04:00
2013-05-27 22:50:59 -07:00
2013-08-14 01:13:40 +02:00
2013-10-02 16:08:24 -04:00
2013-09-13 15:09:52 +02:00
2013-05-27 22:50:59 -07:00