On Wednesday 2008-04-09 19:05, Patrick McHardy wrote: >> I would have been going for NFPROTO_ now, with a translation >> table for use for things like the xfrm code. > > We need to keep the INET/INET6 values identical anyway, > so there no need for translation here. The problem is with non-IP,non-IPv6 that passes through xfrm. That is, if IPX can get xfrmd at all, probably does. >> Should I change all AF_INET6 to NFPROTO_ in the same run >> (i.e. mostly xt_[A-Za-z]*.c), or leave it as is? > > If we introduce those values, they should be used everywhere. > That would amount to a huge patch (perhaps I split to make it feasible). -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html