This is a respin of the earlier patch. Now the cases for -j and -m are also in their own functions, and the shared code has moved to xshared.c. The following changes since commit e76ec99b48745b0e3c8aecbc91ed5bba186cf25f: libxt_cluster: fix inversion in the cluster match (2011-02-06 21:34:33 +0100) are available in the git repository at: git://dev.medozas.de/iptables master Jan Engelhardt (11): src: collect do_command variables in a struct src: move large default: block from do_command6 into its own function src: share iptables_command_state across the two programs src: deduplicate find_proto function src: move OPT_FRAGMENT to the end so the list can be shared src: put shared option flags into xshared src: deduplicate and simplify implicit protocol extension loading src: unclutter command_default function src: move jump option handling from do_command6 into its own function src: move match option handling from do_command6 into its own functions iptables: fix error message for unknown options ip6tables.c | 565 ++++++++++++++++++++++++------------------------------- iptables.c | 607 +++++++++++++++++++++++++---------------------------------- xshared.c | 70 +++++++ xshared.h | 37 ++++ 4 files changed, 608 insertions(+), 671 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html