On Thu, Mar 31, 2005 at 01:42:15AM +0200, Henrik Nordstrom after a spiritual call wrote : ~> On Wed, 30 Mar 2005, Craig Robson wrote: ~> ~> >When I needed this feature it wasn't security related. ~> ~> So why did you need it? The patch introduces just an option, doesn't changes the scope of the universe. Currently I'm using it to test a routing protocol. ~> But again, the exact same can be done with netfilter/ebtables (not ~> iptables like I mistakenly said in an earlier message) by denying ~> forwarding between the interfaces within the bridge. It's the same of saying: <<Why do you use the bridge, you can handle it with iptables/netfilter>>. For me it's just a simpler low level option, then you can use it to do whatever you like. Regards -- :wq! "I don't know nothing" The One Who reached the Thinking Matter '.' [ Alpt --- Freaknet Medialab ] [ GPG Key ID 441CF0EE ] [ Key fingerprint = 8B02 26E8 831A 7BB9 81A9 5277 BFF8 037E 441C F0EE ] - : send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html