Le Tue, 9 Nov 2010 22:27:53 +0100 (CET), Jan Engelhardt <jengelh@xxxxxxxxxx> a Ãcrit : > > On Tuesday 2010-11-09 21:34, Frederic Leroy wrote: > >> On Tuesday 2010-11-09 21:18, Frederic Leroy wrote: > >> > > >> >For the kernel part,I didn't add modalias command because the > >> >userspace don't work yet : > >> > > >> ># ./arptables -A OUTPUT -o eth0 -j CLASSIFY --set-class 0:7 > >> >x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but > >> >only usable from FORWARD/OUTPUT/POSTROUTING > >> > >> Here we have a perfect example of the dentrimentality of code > >> duplication. Hooray for NF_ARP_* not matching NF_INET_*. > > > >It was what saying me that it would be a lot of work. Move arptables > >to match NF_INET_* > > The actual work is minimal - since you just need to change the values > of the NF_ARP_ constants. The problem is that it is shared with > userspace. If I remember correctly what I've see sunday, there is some arrays of size : number of NF_ARP* There is some code with ->hook[NF_xxx]=yyy Moreover, when I turned debug on, it outputs me warnings with overflow on these arrays when I switched to NF_INET. -- FrÃdÃric Leroy -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html