On Tue, Oct 28, 2008 at 01:30:11PM +0100, Patrick McHardy (kaber@xxxxxxxxx) wrote: > >What about part which replaces rules array with a list? > >That's the main part I was interested in though. > > Thats also the part that breaks userspace compatibility and requires > to move a lot of userspace code to the kernel, at least in that > design. Its not possible to do this with iptables without breaking > userspace compability. Ok, I see. Than likely case is closed... -- Evgeniy Polyakov -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html