On Wednesday 2010-03-31 11:56, Patrick McHardy wrote: > >What I'd like a lot more would be if ebtables could run >conntrack/NAT and other useful modules directly so we could get rid >of most of "integration" mess. Not sure if that's really possible >though. I do belive that it is possible. To that end, I had already posted a patchset last October (and that is now slowly being poured into nf-next) that would provide us with protocol-agnostic tables, a welcome (and perhaps even necessary) prerequisite. From there on, it should only be a small step in ensuring that same hooks don't get called multiple times anymore. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html