Re: [libvirt] [patch 2/5] nwfilter: Instantiate state match in ip(6)tables rules

In this patch I am extending the rule instantiator to create the state match according to the state attribute in the XML. Only one iptables rule in the incoming or outgoing direction will be created for a rule in direction 'in' or 'out' respectively. A rule in direction 'inout' does get iptables rules in both directions. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com&gt;