{
char *rule;
char **argv;
- int flipflop;
+ int command_idx;
} iptRule;
typedef struct
iptRulesAppend(iptRules *rules,
char *rule,
char **argv,
- int flipflop)
+ int command_idx)
{
iptRule *r;
rules->rules = r;
- rules->rules[rules->nrules].rule = rule;
- rules->rules[rules->nrules].argv = argv;
- rules->rules[rules->nrules].flipflop = flipflop;
+ rules->rules[rules->nrules].rule = rule;
+ rules->rules[rules->nrules].argv = argv;
+ rules->rules[rules->nrules].command_idx = command_idx;
rules->nrules++;
char **argv;
char *rule = NULL, *p;
const char *s;
- int n, rulelen, flipflop;
+ int n, rulelen, command_idx;
n = 1 + /* /sbin/iptables */
2 + /* --table foo */
if (!(argv[n++] = strdup(rules->table)))
goto error;
- flipflop = n;
+ command_idx = n;
if (!(argv[n++] = strdup(action == ADD ? "--insert" : "--delete")))
goto error;
goto error;
if (action == ADD) {
- retval = iptRulesAppend(rules, rule, argv, flipflop);
+ retval = iptRulesAppend(rules, rule, argv, command_idx);
rule = NULL;
argv = NULL;
} else {
iptRule *rule = &rules->rules[i];
char *orig;
- orig = rule->argv[rule->flipflop];
- rule->argv[rule->flipflop] = (char *) "--delete";
+ orig = rule->argv[rule->command_idx];
+ rule->argv[rule->command_idx] = (char *) "--delete";
if (virRun(NULL, rule->argv, NULL) < 0)
qemudLog(QEMUD_WARN, "Failed to remove iptables rule '%s' from chain '%s' in table '%s': %s",
rule->rule, rules->chain, rules->table, strerror(errno));
- rule->argv[rule->flipflop] = orig;
+ rule->argv[rule->command_idx] = orig;
}
if ((retval = iptablesAddRemoveChain(rules, REMOVE)) ||