Re: [PATCH] netfilter: xtables: add cluster match

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Monday 2009-02-16 15:30, Pablo Neira Ayuso wrote:
>
>>> Hm, you mean the name "mangle" or the name of the option
>>> "--mangle-mac-d"? This is what we currently have in kernel
>>> mainline and arptables userspace, it's not my fault :). I can
>>> send you a patch to fix it with a consistent naming without
>>> breaking backward compatibility both in kernel and user-space.
>>
>> Great, I wasn't aware that this already existed in userspace :)
>
> Yes, it's hosted by the ebtables projects. That tool really need
> some care.

It would indeed. The problem though is, that I, who originally
wanted to unify arptables into iptables (as a start, because it
has not diverged as much as ebtables), have thrown the towel on
that on the grounds of libiptc being such a beast[1], and that 
developers' time would be better spent on (fasten seatbelts)
duplicating xtables/iptables (once more) with the goal of
creating an NFPROTO-agnostic table structure instead that
obsoletes ip,ip6,arp and ebtables in one go.

[1] http://marc.info/?t=122633592000011&r=1&w=2
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux