fast activation error handling

[ktsaou]

In fast activation mode, if it fails it should at least print the offending line that broke the firewall.

iptables-restore does provide the line number.

[ktsaou]

I have just greped the line.

Normaly we should have better error control by detecting the configuration command that generated the wrong line. This requires a lot of re-writing though.

[ktsaou]

@philwhineray I have not tested this in ipv6.
Could you please check it?

[philwhineray]

I can confirm the offending line is correctly reported with an IPv6 error too.

To get the original line can we add comments to the generated iptables-restore file linking back to the original firehol.conf line?

[ktsaou]

I guess comments will do it.