Accept parameter values with whitespace.

E.g. the tcp match extension uses --tcp-flags in this way:

    # iptables -I INPUT -p 23 -m tcp --tcp-flags ACK SYN -j REJECT

Parameters like this need to be passed quoted in python-iptables:

    >>> rule.create_match("tcp")
    >>> match.tcp_flags = "\"ACK SYN\""

Author: ldx

iptc/ip4tc.py

@@ -3,6 +3,7 @@
 import os
 import re
 import ctypes as ct
+import shlex
 import socket
 import struct
 import weakref
@@ -258,9 +259,14 @@ def parse(self, parameter, value):
         else:
             inv = ct.c_int(0)
 
-        argv = (ct.c_char_p * 2)()
+        args = shlex.split(value)
+        if not args:
+            args = [value]
+        N = len(args)
+        argv = (ct.c_char_p * (N + 1))()
         argv[0] = parameter
-        argv[1] = value
+        for i in xrange(N):
+            argv[i + 1] = args[i]
 
         entry = self._rule.entry and ct.pointer(self._rule.entry) or None