On 19.04.2011 09:29, Maciej Åenczykowski wrote: >> What is the purpose of this? > > Unfortunately not every 64-bit kernel version has had fully functional > 32 bit backwards compatibility with userspace. As such, it is > sometimes necessary to ship a 32-bit userspace iptables for 32-bit > kernels and a 64-bit binary for 64-bit kernels - sometimes in the same > OS image. > > The way I've done this is ship both binaries, one named *32 and one > *64 and then have a launcher at * launch the appropriate one for the > running kernel. > > To be fair, these kernels are pretty old at this point, OTOH, the > patch is rather trivial and harmless. Sure, but if you upgrade iptables on those systems, you can simply replace the wrapper script. I don't think it makes much sense to put this into the upstream version to handle compatibility for your specific case. The other patches look good to me. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html