tree 265f83030b75fa1614ef938ff60bcfe17b31ab83
parent 384958620abab397062b67fb2763e813b63f74f0
author Pablo Neira Ayuso <pablo@netfilter.org> 1351078812 +0200
committer Pablo Neira Ayuso <pablo@netfilter.org> 1388443817 +0100

automatic creation of built-in table and chains

In order to emulate the iptables behaviour, this patch changes
the current behaviour to:

1st) check if the table and chains are built-in.
2nd) If they don't exists, create them. If they exists, don't touch
     them.

The automatic creation happens in the -I and -P paths.

We should provide a new command to allow to delete (unregister)
built-in tables and chains. It would be similar to unloading
the iptable_X module that registers the custom table.

This is not done for other commands like -C or -D since they
will fail while trying to find the rule in the kernel if such
combination of chain and table does not exists.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>