On Tue, 24 May 2011, Oskar Berggren wrote: > Regarding ipsets.... how crazy would it be to add a set type > containing interface names? Usually the number of interfaces are not quite high in a system, so it does not seem required. > And how crazy would it be to add a set type containing tuples of > ip-address and interface name? (I.e. the set match would look for ip, > and match if a tuple with the proper interface is found) What is the case where a combination of matches does not solve the issue? Something like this -N interfaces -A interfaces -i foo -j ACTION ... -A rule -m set --match-set src -j interfaces and thus you can match IP addresses and possible (incoming) interfaces easily. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
