DiffRules compares 2 lists of iptables rules and returns 3 new lists, 1.

MergeChains merges source IPchain into destination IPchain, returns a list of rules that were added.

MergeTables merges source IPtable into destination IPtable, returns a list of chains with only rules from source table that were propagated into destination table.

MergeUserChains merges rules from the source chain into the destination chain produces list of rules that combines rules from both chains with order preserved as much as possible.

Returns new iptables Lexer.

ParseRule takes single iptables rule and returns new IPchain with single IPrule.

IPchain represents a chain in iptables.

IPrule represents a rule in iptables.

IPtable represents table in iptables.

IPtables represents iptables configuration.

IPtablesAction represents an action in iptables rule.

Lexer extracts iptables lexical items from the input stream.

Match is a string representation of a simple boolean expressio in iptables terms.

IPtablesComment represents a comment in iptables.