So, in short, I am for the inclusion/usage of the real interface
(eth0) for the above reason...
Also, I completely forgot ipsets which have/store mac addresses. I
haven't tested those yet, but I suspect I am going to run into the same
problem - eth0 vs ifb0. As far as I know ifb0 doesn't have mac address,
in which case it makes more sense to develop the match based on real
interfaces, don't you think?
--
To unsubscribe from this list: send the line "unsubscribe lartc" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html