Hello, Different network interfaces can be grouped using the same group ID. With this patch fewer netfilter rules are necessary but it may also be used by routing. The interface group (ifgroup) member of the net_device can be modified via netlink (with iproute2) and it is used in the new 'ifgroup' netfilter match. ip link set eth0 group 4 iptables -A INPUT -m ifgroup --if-group 4 -j ACCEPT -- Laszlo Attila Toth - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html