Jan Engelhardt írta:
On Nov 20 2007 14:14, Laszlo Attila Toth wrote:
This is the 6th version of our interface group patches.
The interface group value can be used to manage different interfaces
at the same time such as in netfilter/iptables.
I take it you could not use...?
iptables -i iif1 -j dosomething
iptables -i iif2 -j dosomething
This kind of usage requires static interface names. But there are
dynamic interfaces such as ppp, where the actual name is not always
known or sometimes they exist sometimes not. It is difficult to use
iptables this way, and every ifup/ifdown requires change in the iptables
ruleset (donwload it, modify and upload to the kernel). It may be too slow.
The netfilter patch
is ready but future plan is the same for ip/tc commands (except
the ifgroup value change which happens via "ip link set" command).
How can it be useful in conjunction with tc?
jamal wrote it previously:
http://marc.info/?l=linux-netdev&m=119253403415810&w=2
--
Attila
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
