Mr Dash Four <mr.dash.four@xxxxxxxxxxxxxx> wrote: > Am I seeing this right - the whole ipset tc implementation consists > of 3 patches, barely 10k of code in total? Right. its just glue code to query the ipset core via tc/ematch. > Also, am I right in > assuming that in order to build this on older kernels (I am on 3.3) > all I have to do is apply the 3 patches (1 against my kernel and the > other 2 against my current iproute2 implementation)? Yes. > >But beware. This code is more than 6 months old; I never got around to > >actually test it on a live system. Its also bit of a hack since > >ip_set_test() assumes its called from netfilter (the ematch passes in a fake > >xt_action_param ...) > > > >I've rebased it on the current tree and it should at least compile with recent kernels. > All noted, thanks again! If I manage to build it, I'll give it a > thorough look and test it here. I'll keep you all posted. That would be nice, thanks. If it doesn't build on 3.3 let me know and I'll give it a shot myself. -- To unsubscribe from this list: send the line "unsubscribe lartc" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html