"Daniel P. Berrange" <berrange@redhat.com> wrote on 04/30/2014 12:41:30 PM:

> From: "Daniel P. Berrange" <berrange@redhat.com>
> To: Stefan Berger/Watson/IBM@IBMUS,
> Cc: libvirt-list@redhat.com, Stefan Berger <stefanb@linux.vnet.ibm.com>
> Date: 04/30/2014 12:41 PM
> Subject: Re: [PATCH v2] nwfilter: Tear down temp. filters when
> tearing all filters
>
> On Wed, Apr 30, 2014 at 12:30:01PM -0400, Stefan Berger wrote:
> > From: Stefan Berger <stefanb@linux.vnet.ibm.com>
> >
> > Refactor the ebiptablesTearNewRules function so that the teardown
> of temporary
> > filters can also be called by the ebiptablesAllTeardown function.
> >
> > This fixes a problem that leaves temporary filters behind when a
> VM shuts down
> > while its filters are modified.
> >
> > Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
> >
> > v1->v2:
> >   - test cases adjusted to expect more commands
> > ---
> >  src/nwfilter/nwfilter_ebiptables_driver.c | 24 ++++++++----
> >  tests/nwfilterebiptablestest.c            | 64 ++++++++++++++++
> +--------------
> >  2 files changed, 52 insertions(+), 36 deletions(-)
>
> ACK

Pushed