Amin Azez wrote:
* Patrick McHardy wrote, On 26/11/07 07:30:
What advantages does this offer over using realms?
>
From my point of view, the advantage is that you don't have to use realms.
Also, the match isn't REALLY strongly related to routing, which nexthop
suggests, it's really a dest-mac match but where the mac address is
resolved by IP each time from the neighbour table; so it's also useful
against layer 3 bridges as well, where the bridge hardware is out of
your control (may change) but it has the same IP address; e.g. some
hotspots. Realms can't do that AFAIK;
Not sure I understand - if it has an IP, its not a bridge but a
router. If its visible to routing in any way, realms can be used.
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
