"Daniel P. Berrange" <berrange@redhat.com> wrote on 04/30/2014 10:59:59 AM:

> From: "Daniel P. Berrange" <berrange@redhat.com>
> To: Stefan Berger/Watson/IBM@IBMUS,
> Cc: libvirt-list@redhat.com, Stefan Berger <stefanb@linux.vnet.ibm.com>
> Date: 04/30/2014 11:05 AM
> Subject: Re: [PATCH] nwfilter: Tear down temp. filters when tearing
> all filters
>
> On Mon, Apr 28, 2014 at 07:02:22AM -0400, Stefan Berger wrote:
> > From: Stefan Berger <stefanb@linux.vnet.ibm.com>
> >
> > Refactor the ebiptablesTearNewRules function so that the teardown
> of temporary
> > filters can also be called by the ebiptablesAllTeardown function.
> >
> > This fixes a problem that leaves temporary filters behind when a
> VM shuts down
> > while its filters are modified.
> >
> > Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
> > ---
> >  src/nwfilter/nwfilter_ebiptables_driver.c | 24 ++++++++++++++++--------
> >  1 file changed, 16 insertions(+), 8 deletions(-)
>
> ACK, ok for freeze.

Well, it now produces more commands to clear filters. I will have to adapt the test cases as well.

Regards,
   Stefan